ci: fine grained token for scorecard

artek-koltun · Jul 25, 2023 · b494e41 · b494e41
1 parent 06732ae
commit b494e41
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -33,8 +33,8 @@ jobs:
         with:
           results_file: results.sarif
           results_format: sarif
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
           publish_results: true
+          repo-token: ${{ secrets.SCORECARD_TOKEN }}.
 
       # Upload the results as artifacts.
       - name: 'Upload artifact'