Skip to content
run-scorecard

Fix run-scorecard job auth and missing permissions (#84) #142

Sign in to view logs

Fix run-scorecard job auth and missing permissions (#84)

Fix run-scorecard job auth and missing permissions (#84) #142

Workflow file for this run

.github/workflows/run-scorecard.yml at 6e6478c
name: run-scorecard
on:
push:
branches:
# Run on pushes to default branch
- main
schedule:
# Run weekly on Saturdays
- cron: "30 1 * * 6"
# Run when branch protection rules change
branch_protection_rule:
# Run the workflow manually
workflow_dispatch:
# Declare default permissions as read-only
permissions: read-all
jobs:
run-scorecard:

Check failure on line 20 in .github/workflows/run-scorecard.yml

View workflow run for this annotation

GitHub Actions / run-scorecard

Invalid workflow file 

The workflow is not valid. .github/workflows/run-scorecard.yml (Line: 20, Col: 3): Error calling workflow 'bloomberg/.github/.github/workflows/_scorecard.yml@6e6478c5f719f8ac2251558635f700dd5c0f128e'. The nested job 'scorecard' is requesting 'checks: read, contents: read, issues: read, pull-requests: read', but is only allowed 'checks: none, contents: none, issues: none, pull-requests: none'.
# Call reusable workflow file
uses: ./.github/workflows/_scorecard.yml
permissions:
id-token: write
security-events: write
secrets: inherit
with:
# Publish results of Scorecard analysis
publish-results: true