thunderstrike/puppeteer
thunderstrike/puppeteer
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore: add id-token permissions to scorecard-action (#8971)

Browse Source 
See ossf/scorecard-action#900

Example failure with scorecard-action@2 https://github.com/puppeteer/puppeteer/actions/runs/3066712334/jobs/4952194627
This commit is contained in:
Alex Rudenko 2022-09-19 08:24:16 +02:00 committed by GitHub
parent 58c6eab429
commit 6f37eed91b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/scorecards-analysis.yml vendored
View File

@ -20,6 +20,8 @@ jobs:
security-events: write
actions: read
contents: read
# Needed to access OIDC token.
id-token: write
steps:
- name: 'Checkout code'