This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-skin.git
The following commit(s) were added to refs/heads/master by this push:
new 198561c Update for Scorecard 2
198561c is described below
commit 198561ccf1cd51305cf38d2ecbc030db94d42c93
Author: Gary Gregory <[email protected]>
AuthorDate: Fri Dec 23 08:28:46 2022 -0500
Update for Scorecard 2
---
.github/workflows/scorecards-analysis.yml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/scorecards-analysis.yml
b/.github/workflows/scorecards-analysis.yml
index d2f9c0e..cfcaaff 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -31,9 +31,11 @@ jobs:
name: "Scorecards analysis"
runs-on: ubuntu-latest
permissions:
- security-events: write # Needed to upload the results to the
code-scanning dashboard.
+ # Needed to upload the results to the code-scanning dashboard.
+ security-events: write
actions: read
- contents: read
+ id-token: write # This is required for requesting the JWT
+ contents: read # This is required for actions/checkout
steps:
