chore: bump the Rust toolchain to 1.97.1 (#3) #10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: OpenSSF Scorecard | |
| # Scorecard grades repository configuration rather than the crate. | |
| # It scores pinned action SHAs, workflow permissions and release | |
| # provenance, which makes it a regression check on the supply-chain work. | |
| # | |
| # `publish_results` and the SARIF upload both require a public repository. | |
| # Runs before this one goes public are expected to fail. | |
| on: | |
| branch_protection_rule: | |
| schedule: | |
| # Every Monday at 05:30 UTC: https://crontab.guru/#30_5_*_*_1 | |
| - cron: '30 5 * * 1' | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| permissions: read-all | |
| jobs: | |
| analysis: | |
| name: Scorecard analysis | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| # Upload the results to the code-scanning dashboard. | |
| security-events: write | |
| # Publish results to the public Scorecard API, which backs the badge. | |
| id-token: write | |
| contents: read | |
| actions: read | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run analysis | |
| uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 | |
| with: | |
| results_file: results.sarif | |
| results_format: sarif | |
| publish_results: true | |
| - name: Upload results to code scanning | |
| uses: github/codeql-action/upload-sarif@404bd795832c959ffb8efae2b1b4cc1aafc82058 # v3.37.6 | |
| with: | |
| sarif_file: results.sarif |