File tree Expand file tree Collapse file tree 2 files changed +57
-13
lines changed Expand file tree Collapse file tree 2 files changed +57
-13
lines changed Original file line number Diff line number Diff line change @@ -7,16 +7,3 @@ updates:
7
7
labels :
8
8
- " maven"
9
9
- " dependencies"
10
- ignore :
11
- # Ignore Mockito 5.X.X as it does not support Java 8
12
- - dependency-name : " org.mockito:mockito-*"
13
- update-types : ["version-update:semver-major"]
14
-
15
- - package-ecosystem : " maven"
16
- directory : " /"
17
- target-branch : " v2"
18
- schedule :
19
- interval : " weekly"
20
- labels :
21
- - " maven"
22
- - " dependencies"
Original file line number Diff line number Diff line change
1
+ # Runs OSSF
2
+ #
3
+ # Description:
4
+ # Runs OpenSSF Scorecard scan on the project
5
+ #
6
+ # Triggers:
7
+ # - branch_protection_rule
8
+ # - cron: 09:00AM
9
+ # - push
10
+ # - workflow_dispatch
11
+ #
12
+ # Secrets:
13
+ # - Security.SCORECARD_TOKEN
14
+
15
+ on :
16
+ branch_protection_rule :
17
+ schedule :
18
+ - cron : " 0 9 * * *"
19
+ push :
20
+ branches : [main]
21
+ workflow_dispatch : {}
22
+
23
+ name : OpenSSF Scorecard
24
+ run-name : OpenSSF Scorecard
25
+
26
+ permissions : read-all
27
+
28
+ jobs :
29
+ analysis :
30
+ name : Scorecard analysis
31
+ runs-on : ubuntu-latest
32
+ environment : Security
33
+ permissions :
34
+ security-events : write
35
+ id-token : write
36
+ steps :
37
+ - name : Checkout Repository
38
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
39
+ with :
40
+ persist-credentials : false
41
+ - name : Run Analysis
42
+ uses : ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
43
+ with :
44
+ results_file : results.sarif
45
+ results_format : sarif
46
+ publish_results : true
47
+ repo_token : ${{ secrets.SCORECARD_TOKEN }}
48
+ - name : Upload Results
49
+ uses : actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
50
+ with :
51
+ name : SARIF file
52
+ path : results.sarif
53
+ retention-days : 5
54
+ - name : Upload to Code-Scanning
55
+ uses : github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
56
+ with :
57
+ sarif_file : results.sarif
You can’t perform that action at this time.
0 commit comments