Skip to content

ci: add OpenSSF Scorecard workflow#226

Merged
rhuanbarreto merged 1 commit into
mainfrom
ci/openssf-scorecard
Apr 26, 2026
Merged

ci: add OpenSSF Scorecard workflow#226
rhuanbarreto merged 1 commit into
mainfrom
ci/openssf-scorecard

Conversation

@rhuanbarreto

Copy link
Copy Markdown
Contributor

Summary

  • Adds ossf/scorecard-action workflow that runs weekly (Monday 06:15 UTC) and on push to main
  • Publishes results to scorecard.dev for public visibility
  • Uploads SARIF to the GitHub Security tab for in-repo findings
  • Actions are SHA-pinned, consistent with the repo's existing workflow conventions

Test plan

  • Manually trigger the workflow via Actions → OpenSSF Scorecard → Run workflow
  • Verify SARIF results appear under Security → Code scanning
  • Confirm score is published at https://scorecard.dev/viewer/?uri=github.com/archgate/cli

Runs weekly and on push to main. Publishes results to scorecard.dev
and uploads SARIF to the GitHub Security tab.
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying archgate-cli with  Cloudflare Pages  Cloudflare Pages

Latest commit: 348ff6a
Status: ✅  Deploy successful!
Preview URL: https://c76f33d3.archgate-cli.pages.dev
Branch Preview URL: https://ci-openssf-scorecard.archgate-cli.pages.dev

View logs

@rhuanbarreto rhuanbarreto enabled auto-merge (squash) April 26, 2026 15:16
@rhuanbarreto rhuanbarreto merged commit 9c4a8a1 into main Apr 26, 2026
9 checks passed
@rhuanbarreto rhuanbarreto deleted the ci/openssf-scorecard branch April 26, 2026 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant