From ce15c9bfb8e2b0ee3999eab46cddaacabcd1d5d4 Mon Sep 17 00:00:00 2001 From: Derek Nola Date: Tue, 15 Jul 2025 08:38:45 -0700 Subject: [PATCH] Enable branch protection checks for openssf (#12640) Signed-off-by: Derek Nola --- .github/workflows/scorecard.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 4e381bb8de..b2b2972118 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -47,7 +47,8 @@ jobs: # - you want to enable the Branch-Protection check on a *public* repository, or # - you are installing Scorecard on a *private* repository # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional. - # repo_token: ${{ secrets.SCORECARD_TOKEN }} + # TODO expires on July 15, 2026 + repo_token: ${{ secrets.SCORECARD_TOKEN }} # Public repositories: # - Publish results to OpenSSF REST API for easy access by consumers