From 22cc2e5addf3605b122979100f94493e712ca593 Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Tue, 14 Nov 2023 14:20:35 +0100 Subject: [PATCH] fix(gha): disable branch protection rule trigger for scorecard Signed-off-by: Luca Guerra --- .github/workflows/scorecard.yaml | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index b8cc5785..974405b2 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -4,14 +4,19 @@ name: Scorecard supply-chain security on: - # For Branch-Protection check. Only the default branch is supported. See - # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection - branch_protection_rule: # To guarantee Maintained check is occasionally updated. See # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained schedule: # Weekly on Mondays at 00:00. - cron: '0 0 * * 1' + + # The OSSF recommendation encourages to enable branch protection rules trigger + # to update the scorecard + # (https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection) + # but due to our GitHub org management this check is triggered too often and is + # therefore disabled. + # branch_protection_rule: + push: branches: [ "master" ]