Skip to content

Commit

Permalink
[CI] Enable OSSF scorecard workflow to run on intel/llvm (#12779)
Browse files Browse the repository at this point in the history
Enable the OSSF (https://github.com/ossf) scorecard workflow to run and
generate the repo security score for tracking current repo security
issues.

Currently enabled to run nightly while we resolve any open issues, will
then move to weekly once clean runs.
  • Loading branch information
stdale-intel committed Feb 21, 2024
1 parent 69d233b commit 358843a
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
# by a third-party and are governed by separate terms of service, privacy
# policy, and support documentation.

# Check current LLVM-Project results here: https://securityscorecards.dev/viewer/?uri=github.com/llvm/llvm-project
# Check current LLVM-Project results here: https://securityscorecards.dev/viewer/?uri=github.com/intel/llvm

name: Scorecard supply-chain security
on:
Expand All @@ -12,7 +12,7 @@ on:
# To guarantee Maintained check is occasionally updated. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
- cron: '38 20 * * *'
- cron: '30 20 * * *'

# Declare default permissions as read only.
permissions:
Expand All @@ -22,7 +22,7 @@ jobs:
analysis:
name: Scorecard analysis
runs-on: ubuntu-latest
if: github.repository == 'llvm/llvm-project'
if: github.repository == 'intel/llvm'
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
Expand Down

0 comments on commit 358843a

Please sign in to comment.