/
githubmirror
/
components
Обзор
Документация
Войти
/
githubmirror
/
components
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
.github/workflows/scorecard.yml
52 строки
1 KB
Angular Robot
build: update github/codeql-action action to v4.37.0 (#33481)
09 июл 2026, 12:12
Не верифицирован
09 июл 2026, 12:12
16de6be
Код
Авторство
О чём код?
name: OpenSSF Scorecard on: branch_protection_rule: schedule: - cron: '0 3 * * 0' push: branches: [main] workflow_dispatch: # Declare default permissions as read only. permissions: contents: read jobs: analysis: name: Scorecards analysis runs-on: ubuntu-latest permissions: # Needed to upload the results to code-scanning dashboard. security-events: write # Needed to publish results id-token: write actions: read contents: read steps: - name: 'Checkout code' uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: 'Run analysis' uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: results_file: results.sarif results_format: sarif repo_token: ${{ secrets.GITHUB_TOKEN }} publish_results: true # Upload the results as artifacts. - name: 'Upload artifact' uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: SARIF file path: results.sarif retention-days: 5 # Upload the results to GitHub's code scanning dashboard. - name: 'Upload to code-scanning' uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 with: sarif_file: results.sarif