Bump ossf/scorecard-action from 2.0.6 to 2.3.1 #11
Triggered via pull request
January 7, 2024 02:06
dependabot[bot]
Status
Startup failure
Total duration
–
Artifacts
–
on.pr.yml
on: pull_request
Checks
/
dependency-review
Matrix: Build (Gradle)
Waiting for pending jobs
Matrix: Build (Maven)
Waiting for pending jobs
Matrix: Checks / Analyze
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/on.pr.yml#L55
The workflow is not valid. .github/workflows/on.pr.yml (Line: 55, Col: 3): Error calling workflow 'sgammon/modern-java-practices/.github/workflows/checks.codeql.yml@68e06126c7bfbc3badfbeb926e0b1a859b691999'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
|