name: 'openssf' on: push: branches: - master jobs: scorecard: runs-on: ubuntu-latest name: OpenSSF steps: - name: Checkout repository uses: actions/checkout@v3 - name: OSSF Scorecard action uses: ossf/scorecard-action@v2.1.3 with: results_file: results.sarif results_format: sarif publish_results: true