Skip to content

Bump step-security/harden-runner from 2.10.2 to 2.10.4 (#126) #77

Bump step-security/harden-runner from 2.10.2 to 2.10.4 (#126)

Bump step-security/harden-runner from 2.10.2 to 2.10.4 (#126) #77

Workflow file for this run

---
name: scorecard
on:
push:
branches:
# Run on pushes to default branch
- main
schedule:
# Run weekly on Saturdays
- cron: "30 1 * * 6"
# Run when branch protection rules change
branch_protection_rule:
# Run the workflow manually
workflow_dispatch:
# Declare default permissions as read-only
permissions: read-all
jobs:
run-scorecard:
# Call reusable workflow file
uses: cisco-ospo/.github/.github/workflows/_scorecard.yml@main
permissions:
id-token: write
security-events: write
secrets: inherit
with:
# Publish results of Scorecard analysis
publish-results: true