Skip to content

Scorecard supply-chain security #3

Scorecard supply-chain security

Scorecard supply-chain security #3

Workflow file for this run

# Example: Copy this to your repo as .github/workflows/scorecards.yml
name: Scorecard supply-chain security
on:
branch_protection_rule:
schedule:
- cron: '20 7 * * 2'
push:
branches: [main]
jobs:
analysis:

Check failure on line 12 in .github/workflows/scorecards.yml

View workflow run for this annotation

GitHub Actions / Scorecard supply-chain security

Invalid workflow file

The workflow is not valid. .github/workflows/scorecards.yml (Line: 12, Col: 3): Error calling workflow 'cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@9ce5ba83776bab80eeffb695f7374e334cf6bd9f'. The nested job 'analysis' is requesting 'actions: read, checks: read, issues: read, pull-requests: read, security-events: write, id-token: write', but is only allowed 'actions: none, checks: none, issues: none, pull-requests: none, security-events: none, id-token: none'.
uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@9ce5ba83776bab80eeffb695f7374e334cf6bd9f # v0.2.0
secrets: inherit