fix: use commit SHA for scorecard-action (not tag SHA)

This commit is contained in:
2026-03-19 09:21:29 +00:00
parent 578cdd7dd6
commit d260ff8b5e

View File

@@ -22,7 +22,7 @@ jobs:
persist-credentials: false persist-credentials: false
- name: Run OpenSSF Scorecard - name: Run OpenSSF Scorecard
uses: ossf/scorecard-action@99c09fe975337306107572b4fdf4db224cf8e2f2 # v2.4.3 uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
with: with:
results_file: results.sarif results_file: results.sarif
results_format: sarif results_format: sarif