Skip to content

build(deps): bump localstack/localstack from 2.1.0 to 2.2.0 in /test/… #32

build(deps): bump localstack/localstack from 2.1.0 to 2.2.0 in /test/…

build(deps): bump localstack/localstack from 2.1.0 to 2.2.0 in /test/… #32

Workflow file for this run

name: Scorecard supply-chain security
on:
# (Optional) For Branch-Protection check. Only the default branch is supported. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
# branch_protection_rule:
# To guarantee Maintained check is occasionally updated. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
- cron: '36 0 * * 0'
push:
branches: ["main"]
# Declare default permissions as none.
permissions: {}
jobs:
analysis:
name: Scorecard analysis
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
# Needed to publish results and get a badge (see publish_results below).
id-token: write
uses: sigstore/community/.github/workflows/reusable-scorecard.yml@d0c95c8803672313d0bf72e1a44021be5b583c24 # main
# (Optional) Disable publish results:
# with:
# publish_results: false
# (Optional) Enable Branch-Protection check:
# secrets:
# scorecard_token: ${{ secrets.SCORECARD_TOKEN }}