diff --git a/.github/workflows/scorecard-publish.yml b/.github/workflows/scorecard-publish.yml index d8228be..c66f78b 100644 --- a/.github/workflows/scorecard-publish.yml +++ b/.github/workflows/scorecard-publish.yml @@ -33,7 +33,7 @@ jobs: persist-credentials: false - name: Publish Scorecard results - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: publish_results: true results_file: scorecard-public-results.json diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 971df68..c4edaf1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,7 +32,7 @@ jobs: persist-credentials: false - name: Run Scorecard - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: publish_results: false results_file: scorecard-results.sarif