ok/jj
1
0
Fork 0
forked from mirrors/jj
Code Pull requests Activity

github: make Scorecard security scanner not use access token

Browse source 
Google's security team asked us to remove this use of a PAT. It's
apparently supposed to work without it, it's just that it won't be
able to check that we have bronch protection set up.
This commit is contained in:
Martin von Zweigbergk 2022-12-08 14:32:51 -08:00 committed by Martin von Zweigbergk
parent a569ac07f6
commit 79d6779995
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
.github/workflows/scorecards.yml vendored
View file

@ -30,9 +30,6 @@ jobs:
with:
results_file: results.sarif
results_format: sarif
# Read-only PAT token. To create it,
# follow the steps in https://github.com/ossf/scorecard-action#pat-token-creation.
repo_token: ${{ secrets.SCORECARD_READ_TOKEN }}
# Publish the results to enable scorecard badges. For more details, see
# https://github.com/ossf/scorecard-action#publishing-results.
# For private repositories, `publish_results` will automatically be set to `false`,