Ossf/gha scorecard (#24)

🐛 fix support for OpenSSF Scorecard
codebeltnet · Nov 15, 2024 · 99230c9 · 99230c9
1 parent 013bdcd
commit 99230c9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/.github/workflows/pipelines.yml b/.github/workflows/pipelines.yml
@@ -5,17 +5,15 @@ on:
     paths-ignore:
       - .codecov/**
       - .docfx/**
-      - .github/**
       - .nuget/**
-      - '**.md'
+      - '**/*.md'
   push:
     branches: [main]
     paths-ignore:
       - .codecov/**
       - .docfx/**
-      - .github/**
       - .nuget/**
-      - '**.md'
+      - '**/*.md'
   workflow_dispatch:
     inputs:
       configuration:

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -23,14 +23,14 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@v2
+        uses: ossf/scorecard-action@v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@4
+        uses: actions/upload-artifact@v4
         with:
           name: SARIF file
           path: results.sarif