From c2752c53ab473cdf9f604215042a8a354bd93651 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 06:40:24 +0000 Subject: [PATCH] Bump ossf/scorecard-action Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 4a0b87a20cc42672e6c80e82e63b5cd8f25f108a to 05bb7c663f6ec9bd8484da0a5b5a77d423e3f88c. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/4a0b87a20cc42672e6c80e82e63b5cd8f25f108a...05bb7c663f6ec9bd8484da0a5b5a77d423e3f88c) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 05bb7c663f6ec9bd8484da0a5b5a77d423e3f88c dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index a4b50f5df7..c065ab9cb6 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -27,7 +27,7 @@ jobs: persist-credentials: false - name: OSSF Scorecard action - uses: ossf/scorecard-action@4a0b87a20cc42672e6c80e82e63b5cd8f25f108a + uses: ossf/scorecard-action@05bb7c663f6ec9bd8484da0a5b5a77d423e3f88c with: # OUTPUT: Path to file to store results results_file: results.sarif