From 446c68d7bf80354d9b5521fa8d227a42606b4527 Mon Sep 17 00:00:00 2001 From: Jonas Bushart Date: Tue, 3 May 2022 20:11:39 +0000 Subject: [PATCH] Disable the OSSF Scorecard Action Without a way to supress analysis results more permanently the security tab becomes too noisy. Either the action needs to allow an allowlist or the GitHub UI needs to be better in permanently supressing lines. The biggest annoyance is that each change to a action tag will trigger a new warning, even if the same line was ignored before. https://github.com/ossf/scorecard-action/issues/143 --- .github/workflows/scorecards-analysis.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 0c64a8ac..abea54c7 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -1,11 +1,11 @@ name: Scorecards supply-chain security -on: - # Only the default branch is supported. - branch_protection_rule: - schedule: - - cron: '22 12 * * 4' - push: - branches: [ master ] +on: [] +# # Only the default branch is supported. +# branch_protection_rule: +# schedule: +# - cron: '22 12 * * 4' +# push: +# branches: [ master ] # Declare default permissions as read only. permissions: read-all