Skip to content

Scorecards supply-chain security #196

Scorecards supply-chain security

Scorecards supply-chain security #196

Workflow file for this run

# SPDX-License-Identifier: MPL-2.0
# This workflow is managed by gh actions-lock.
name: Scorecards supply-chain security
on:
branch_protection_rule:
schedule:
- cron: '23 4 * * 1'
permissions: read-all
jobs:
analysis:

Check failure on line 13 in .github/workflows/scorecard.yml

View workflow run for this annotation

GitHub Actions / Scorecards supply-chain security

Invalid workflow file

The workflow is not valid. .github/workflows/scorecard.yml (Line: 13, Col: 3): Error calling workflow 'hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4'. The workflow is requesting 'actions: read, contents: read', but is only allowed 'actions: none, contents: none'.
permissions:
security-events: write
id-token: write
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@bd0df9ead7faf0cdfe0e13e7966d91e28d0101d4
secrets: inherit