laurentsimon/OSSF Scorecard action

Run OSSF Scorecard checks and output results in SARIF format

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Dec 30, 2021
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: laurentsimon/action-example@ce877503668d0680e52103ce87875b40e6cdbc65 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
results_fileOUTPUT: Path to file to store resultsyes
results_formatOUTPUT: format of the results [json, sarif]yes
repo_tokenINPUT: GitHub token with read accessyes
publish_resultsINPUT: Publish resultsnofalse

no outputs