fix(deps): bump h2 to 0.4.18 for RUSTSEC-2026-0258 (#105) #22
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # OpenSSF Scorecard — an external auditor grading much of the same supply | |
| # chain posture this project maintains by hand (pinned actions, least | |
| # privilege, signed releases, branch protection). Results land in the | |
| # Security tab; treat regressions as review input. | |
| name: scorecard | |
| on: | |
| branch_protection_rule: | |
| push: | |
| branches: [main] | |
| schedule: | |
| # Wednesdays 05:00 UTC — offset from the other two crons. | |
| - cron: '0 5 * * 3' | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| analysis: | |
| # Scorecard grades the upstream repository; a fork's score is noise. | |
| if: github.repository == 'no42-org/onmsctl' | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| security-events: write # upload the SARIF result | |
| id-token: write # publish to the OpenSSF public dataset | |
| timeout-minutes: 20 | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run analysis | |
| uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 | |
| with: | |
| results_file: results.sarif | |
| results_format: sarif | |
| # Publishes the score to the OpenSSF dataset, which is what backs | |
| # the Scorecard badge. Public repo, public result. | |
| publish_results: true | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: scorecard-results | |
| path: results.sarif | |
| retention-days: 5 | |
| - name: Upload to code scanning | |
| uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 | |
| with: | |
| sarif_file: results.sarif |