aboutsummaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorTom Stellard <tstellar@redhat.com>2024-03-27 06:25:10 -0700
committerGitHub <noreply@github.com>2024-03-27 06:25:10 -0700
commit2fa46ca922178ec049006a1b4851058400cbada9 (patch)
tree52d5a5b3f96b7eaef711be708b1986d8c922c4cf /.github
parentb343b02a88821cab320e7d9976a05eabd0df29ec (diff)
downloadllvm-2fa46ca922178ec049006a1b4851058400cbada9.zip
llvm-2fa46ca922178ec049006a1b4851058400cbada9.tar.gz
llvm-2fa46ca922178ec049006a1b4851058400cbada9.tar.bz2
[workflows] Update the version of the scorecard-action (#86753)
I'm hoping this will fix the errors we've been seeing the last few days: 2024-03-19T20:44:07.4841482Z 2024/03/19 20:44:07 error signing scorecard json results: error signing payload: getting key from Fulcio: verifying SCT: updating local metadata and targets: error updating to TUF remote mirror: invalid key
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/scorecard.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b8e8ab2..ff61cf8 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -36,7 +36,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
+ uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
with:
results_file: results.sarif
results_format: sarif