Packages

rocksdb

3.1.2
3.1.2 3.1.1 3.1.0 3.0.0 2.6.2 2.6.1 retired 2.6.0 retired 2.5.0 2.4.1 2.4.0 2.3.0 2.2.0 2.1.0 2.0.0 1.9.0 1.8.0 1.7.0 1.6.0 1.5.1 1.5.0 1.4.0 1.3.2 1.3.1 1.3.0 1.2.0 1.1.1 1.1.0 1.0.0 0.26.2 0.26.1 0.26.0 0.25.0 0.24.0 0.23.3 0.23.2 0.23.1 0.23.0 0.22.0 0.21.0 0.20.1 0.20.0 0.19.0 0.18.0 0.17.0 0.16.0 0.15.0 0.14.0 0.13.1 0.13.0 0.12.0 0.11.0 0.10.0 0.9.1 0.9.0 0.8.2 0.8.1 0.8.0 0.7.1 0.7.0 0.6.4 0.6.3 0.6.2 0.6.1 0.6.0

RocksDB for Erlang

HexDocs

Current section

Files

Jump to
Readme
64 Versions
0 Dependencies
Dependants
Files
Activity
rocksdb deps zstd .github workflows scorecards.yml
Raw

deps/zstd/.github/workflows/scorecards.yml 

name: Scorecards supply-chain security

on:

  # Only the default branch is supported.

  branch_protection_rule:

  schedule:

    - cron: '22 21 * * 2'

  push:

    # TODO: Add release branch when supported?

    branches: [ "dev" ]



# Declare default permissions as read only.

permissions: read-all



jobs:

  analysis:

    name: Scorecards analysis

    if: github.repository == 'facebook/zstd'

    runs-on: ubuntu-latest

    permissions:

      # Needed to upload the results to code-scanning dashboard.

      security-events: write

      # Used to receive a badge.

      id-token: write

      # Needs for private repositories.

      contents: read

      actions: read



    steps:

      - name: "Checkout code"

        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # tag=v3

        with:

          persist-credentials: false



      - name: "Run analysis"

        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # tag=v2.4.0

        with:

          results_file: results.sarif

          results_format: sarif

          # (Optional) Read-only PAT token. Uncomment the `repo_token` line below if:

          # - you want to enable the Branch-Protection check on a *public* repository, or

          # - you are installing Scorecards on a *private* repository

          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.

          # repo_token: ${{ secrets.SCORECARD_READ_TOKEN }}



          # Publish the results for public repositories to enable scorecard badges. For more details, see

          # https://github.com/ossf/scorecard-action#publishing-results.

          # For private repositories, `publish_results` will automatically be set to `false`, regardless

          # of the value entered here.

          publish_results: true



      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF

      # format to the repository Actions tab.

      - name: "Upload artifact"

        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # tag=v4.3.1

        with:

          name: SARIF file

          path: results.sarif

          retention-days: 5



      # Upload the results to GitHub's code scanning dashboard.

      - name: "Upload to code-scanning"

        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # tag=v3.28.9

        with:

          sarif_file: results.sarif