diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 3e553b1c7f..3d3f6c929d 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -24,16 +24,7 @@ jobs: uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: persist-credentials: false - - name: Check secret - id: checksecret - uses: ./.github/actions/is-defined - with: - value: ${{ secrets.SCORECARD_READ_TOKEN }} - - name: Setup build env - if: steps.checksecret.outputs.result == 'true' - uses: ./.github/actions/setup-build-env - name: Run analysis - if: steps.checksecret.outputs.result == 'true' uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af # v2.1.3 with: results_file: results.sarif @@ -41,14 +32,12 @@ jobs: repo_token: ${{ secrets.SCORECARD_READ_TOKEN }} publish_results: true - name: Upload artifact - if: steps.checksecret.outputs.result == 'true' uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 with: name: SARIF file path: results.sarif retention-days: 5 - name: Upload to code-scanning - if: steps.checksecret.outputs.result == 'true' uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a # v2.13.4 with: sarif_file: results.sarif