chore: add openssf scorecard

psastras · Aug 1, 2024 · 915c1d2 · 915c1d2
1 parent c650387
commit 915c1d2
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 1 deletion.
diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml
@@ -1,6 +1,8 @@
 name: auto approve
 
 on: pull_request_target
+permissions: write-all
+
 
 jobs:
   auto-approve:

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -8,6 +8,7 @@ on:
 
 # ignore gh-pages
 name: main
+permissions: write-all
 
 jobs:
   build-test:

diff --git a/.github/workflows/sarif.yml b/.github/workflows/sarif.yml
@@ -5,6 +5,7 @@ on:
     types: [completed]
 
 name: sarif
+permissions: write-all
 
 jobs:
   upload-sarif:

diff --git a/.github/workflows/scorecard-analysis.yml b/.github/workflows/scorecard-analysis.yml
@@ -1,4 +1,3 @@
-name: Scorecard analysis workflow
 on:
   push:
     # Only the default branch is supported.

diff --git a/README.md b/README.md
@@ -1,4 +1,6 @@
 [![Workflow Status](https://github.com/psastras/sarif-rs/workflows/main/badge.svg)](https://github.com/psastras/sarif-rs/actions?query=workflow%3A%22main%22)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/psastras/sarif-rs/badge)](https://scorecard.dev/viewer/?uri=github.com/psastras/sarif-rs)
+
 
 # sarif-rs