From c7317903d117b0aabf3e82b06da943941234a170 Mon Sep 17 00:00:00 2001 From: Stefan Bischof Date: Fri, 2 Oct 2026 23:05:42 +0200 Subject: [PATCH] Align the files of the scorecard-analysis blueprint Rebuilt on current main: the branch predated the migration import and could not be rebased. Signed-off-by: Stefan Bischof --- .github/workflows/scorecard-analysis.yml | 20 +++----------------- 1 file changed, 3 insertions(+), 17 deletions(-) diff --git a/.github/workflows/scorecard-analysis.yml b/.github/workflows/scorecard-analysis.yml index 5f0bcf0..c54432c 100644 --- a/.github/workflows/scorecard-analysis.yml +++ b/.github/workflows/scorecard-analysis.yml @@ -1,4 +1,5 @@ -# Managed by otterdog blueprint scorecard-integration. +# Managed by otterdog blueprint scorecard-analysis. Do not edit here. +# Scorecard logic lives in osgi/.github (reusable workflow). name: Scorecard analysis on: branch_protection_rule: @@ -9,22 +10,7 @@ on: permissions: read-all jobs: analysis: - runs-on: ubuntu-latest permissions: security-events: write id-token: write - steps: - - name: Checkout code - uses: actions/checkout@v4 - with: - persist-credentials: false - - name: Run analysis - uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 - with: - results_file: results.sarif - results_format: sarif - publish_results: true - - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif + uses: osgi/.github/.github/workflows/scorecard.yml@main