From 86f216541af6078d3337916670c9160d024ac68b Mon Sep 17 00:00:00 2001 From: Martin von Zweigbergk Date: Sat, 17 Sep 2022 22:56:40 -0700 Subject: [PATCH] github: remove `publish_results` field in wrong place When I read https://github.com/ossf/scorecard-action#breaking-changes-in-v2 for 6d7ce74a9a7a, it seems like I misread the "for" as "and" in "`include id-token: write` for `publish_results: true`". The latter is not a permissions, it's another setting we have defined further down. --- .github/workflows/scorecards.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 4e9d53fcc..257083f8d 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -18,7 +18,6 @@ jobs: # Needed to upload the results to code-scanning dashboard. security-events: write id-token: write - publish_results: true steps: - name: "Checkout code"