/
githubmirror
/
angular-cli
Обзор
Документация
Войти
/
githubmirror
/
angular-cli
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
.github/workflows/scorecard.yml
51 строка
1 KB
Angular Robot
build: update all github actions
06 авг 2026, 09:29
06 авг 2026, 09:29
ed1e751
Код
Авторство
О чём код?
name: OpenSSF Scorecard on: branch_protection_rule: schedule: - cron: '0 2 * * 0' push: branches: [main] workflow_dispatch: # Declare default permissions as read only. permissions: contents: read jobs: analysis: name: Scorecards analysis runs-on: ubuntu-latest permissions: actions: read contents: read # Needed to upload the results to code-scanning dashboard. security-events: write # Needed to publish results id-token: write steps: - name: 'Checkout code' uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: 'Run analysis' uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif publish_results: true # Upload the results as artifacts. - name: 'Upload artifact' uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: SARIF file path: results.sarif retention-days: 5 # Upload the results to GitHub's code scanning dashboard. - name: 'Upload to code-scanning' uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: sarif_file: results.sarif