External/oc
1
0
Fork 0
mirror of https://github.com/only-cli/oc.git synced 2026-09-15 10:40:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix scorecard-action pin: v2 doesn't exist as a tag upstream

Browse Source 
ossf/scorecard-action only publishes point-release tags (v2.4.4, etc),
no floating v2 major tag, so the workflow failed to even resolve the
action and never published results -- which is why the README badge
showed "invalid repo path". Pin to the v2.4.4 commit SHA instead.
This commit is contained in:
only-cli
2026-08-19 16:25:14 -04:00
parent d0516a6a4c
commit bf9fd98137
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/scorecard.yml
+1 -1
View File
@@ -26,7 +26,7 @@ jobs:
with:
persist-credentials: false
- uses: ossf/scorecard-action@v2
- uses: ossf/scorecard-action@55891bbd73f2425e97637d96e306fc9d491d0b21 # v2.4.4
with:
results_file: results.sarif
results_format: sarif