Skip to content

Commit 3f23077

Browse files
authored
chore(ci): remove v2 dependabot configuration. Restore OSSF scorecard workflow. (#1924)
1 parent d9ee495 commit 3f23077

File tree

2 files changed

+57
-13
lines changed

2 files changed

+57
-13
lines changed

.github/dependabot.yml

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -7,16 +7,3 @@ updates:
77
labels:
88
- "maven"
99
- "dependencies"
10-
ignore:
11-
# Ignore Mockito 5.X.X as it does not support Java 8
12-
- dependency-name: "org.mockito:mockito-*"
13-
update-types: ["version-update:semver-major"]
14-
15-
- package-ecosystem: "maven"
16-
directory: "/"
17-
target-branch: "v2"
18-
schedule:
19-
interval: "weekly"
20-
labels:
21-
- "maven"
22-
- "dependencies"
Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
# Runs OSSF
2+
#
3+
# Description:
4+
# Runs OpenSSF Scorecard scan on the project
5+
#
6+
# Triggers:
7+
# - branch_protection_rule
8+
# - cron: 09:00AM
9+
# - push
10+
# - workflow_dispatch
11+
#
12+
# Secrets:
13+
# - Security.SCORECARD_TOKEN
14+
15+
on:
16+
branch_protection_rule:
17+
schedule:
18+
- cron: "0 9 * * *"
19+
push:
20+
branches: [main]
21+
workflow_dispatch: {}
22+
23+
name: OpenSSF Scorecard
24+
run-name: OpenSSF Scorecard
25+
26+
permissions: read-all
27+
28+
jobs:
29+
analysis:
30+
name: Scorecard analysis
31+
runs-on: ubuntu-latest
32+
environment: Security
33+
permissions:
34+
security-events: write
35+
id-token: write
36+
steps:
37+
- name: Checkout Repository
38+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
39+
with:
40+
persist-credentials: false
41+
- name: Run Analysis
42+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
43+
with:
44+
results_file: results.sarif
45+
results_format: sarif
46+
publish_results: true
47+
repo_token: ${{ secrets.SCORECARD_TOKEN }}
48+
- name: Upload Results
49+
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
50+
with:
51+
name: SARIF file
52+
path: results.sarif
53+
retention-days: 5
54+
- name: Upload to Code-Scanning
55+
uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
56+
with:
57+
sarif_file: results.sarif

0 commit comments

Comments
 (0)