docker/attest-provider
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'main' into dependabot/github_actions/ossf/scorecard-action-2.3.3

Browse Source
This commit is contained in:
Joel Kamp
2024-05-23 11:07:22 -05:00
committed by GitHub
parent fccbbd837d 9294bdbc3a
commit 2464c6a9a3
28 changed files with 1150 additions and 291 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/scorecards.yml vendored
View File

@@ -36,7 +36,7 @@ jobs:
egress-policy: audit
- name: "Checkout code"
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
with:
persist-credentials: false
@@ -63,7 +63,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
with:
name: SARIF file
path: results.sarif