ci: use reusable Scorecard workflow

statnett · Oct 10, 2023 · ad6bdae · ad6bdae
1 parent 05aaffb
commit ad6bdae
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 72 deletions.
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
@@ -0,0 +1,17 @@
+---
+name: Scorecard supply-chain security
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+jobs:
+  trigger:
+    uses: statnett/github-workflows/.github/workflows/scorecard.yaml@main
+    permissions:
+      security-events: write
+      id-token: write
+      contents: read
+      actions: read
diff --git a/.github/workflows/scorecards.yaml b/.github/workflows/scorecards.yaml