diff --git a/.github/workflows/scorecard-scheduler.yaml b/.github/workflows/scorecard-scheduler.yaml new file mode 100644 index 0000000..dd96231 --- /dev/null +++ b/.github/workflows/scorecard-scheduler.yaml @@ -0,0 +1,22 @@ +name: OpenSSF Scorecard Analysis + +on: + push: + branches: [ main ] + +jobs: + run-scorecard: + runs-on: ubuntu-latest + + permissions: + contents: read + + steps: + - name: Check out code + uses: actions/checkout@v4 + + - name: Run Scorecard + uses: ossf/scorecard-action@v2.4.0 + with: + results_file: results.json + publish_results: true