chore(deps): update grafana/grafana:13.1.1 docker digest to 7cb8c64 (… #154
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: OSSF Scorecard | |
| on: | |
| push: | |
| branches: [main] | |
| schedule: | |
| - cron: "43 6 * * 5" # Weekly Friday 06:43 UTC | |
| workflow_dispatch: | |
| permissions: {} | |
| jobs: | |
| analysis: | |
| name: Scorecard analysis | |
| runs-on: ubuntu-24.04 | |
| # Prevents fork runs from failing due to missing write permissions or secrets. | |
| if: ${{ github.repository == 'prometheus/client_java' }} | |
| permissions: | |
| contents: read | |
| security-events: write # required to upload SARIF results | |
| id-token: write # required by scorecard-action for OIDC token | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 | |
| with: | |
| persist-credentials: false | |
| - name: Run OSSF Scorecard analysis | |
| uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 | |
| with: | |
| results_file: results.sarif | |
| results_format: sarif | |
| publish_results: true | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: SARIF file | |
| path: results.sarif | |
| retention-days: 5 | |
| - name: Upload to code scanning | |
| uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 | |
| with: | |
| sarif_file: results.sarif |