From a0b2a76d4be7a18519f5375eb77dfd8ef84ff62d Mon Sep 17 00:00:00 2001 From: Nigel Jones Date: Tue, 27 Aug 2024 10:23:12 +0100 Subject: [PATCH] Schedule only, no PR. Minor updates to scorecard Signed-off-by: Nigel Jones --- .github/workflows/scorecard.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index ed0f1327d8..6c04488924 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -47,7 +47,7 @@ jobs: # For private repositories: # - `publish_results` will always be set to `false`, regardless # of the value entered here. - publish_results: false + publish_results: true # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. @@ -56,9 +56,9 @@ jobs: with: name: SARIF file path: results.sarif - retention-days: 5 + retention-days: 28 # Upload the results to GitHub's code scanning dashboard. - #- name: "Upload to code-scanning" - # uses: github/codeql-action/upload-sarif@e949a1676c32f4c215780f7429eb9f00ff18b225 # pin@v2 - # with: - # sarif_file: results.sarif + - name: "Upload to code-scanning" + uses: github/codeql-action/upload-sarif@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # pin@v3 + with: + sarif_file: results.sarif