From bb7ec49dfd290c0433244a20d6dc9bd0a6727a97 Mon Sep 17 00:00:00 2001 From: Russell McGuire Date: Mon, 28 Sep 2026 08:20:32 -0700 Subject: [PATCH] Fix scorecard.yml workflow Signed-off-by: Russell McGuire --- .github/workflows/scorecard.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e88e0f8d..166490e0 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -28,7 +28,7 @@ jobs: with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@v2.3.3 + uses: ossf/scorecard-action@v2.4.4 with: results_file: results.sarif results_format: sarif @@ -45,6 +45,6 @@ jobs: path: results.sarif - name: "Upload to code-scanning" if: github.event_name != 'pull_request' - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: results.sarif