From 12701cf306e01719a3a62c12ab5abccff7b606ea Mon Sep 17 00:00:00 2001 From: Trask Stalnaker Date: Mon, 17 Nov 2025 15:00:08 -0800 Subject: [PATCH] Remove scorecard experiment --- .github/workflows/ossf-scorecard.yml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index ff48707b2..230f84dea 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -24,18 +24,8 @@ jobs: with: persist-credentials: false - - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 - id: create-token - with: - # analyzing classic branch protections requires a token with admin read permissions - # see https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md - # and https://github.com/open-telemetry/community/issues/2769 - app-id: ${{ vars.OSSF_SCORECARD_APP_ID }} - private-key: ${{ secrets.OSSF_SCORECARD_PRIVATE_KEY }} - - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: - repo_token: ${{ steps.create-token.outputs.token }} results_file: results.sarif results_format: sarif publish_results: true