Commit graph

8 commits

Author SHA1 Message Date
renovate[bot]
bd7406cc17 chore(deps): update github/codeql-action action to v2.2.1
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-28 16:22:24 +01:00
renovate[bot]
b1c1f320ea chore(deps): update github/codeql-action action to v2.1.39
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-21 23:05:26 +01:00
renovate[bot]
90a1d45f82 chore(deps): update github/codeql-action action to v2.1.38
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-16 16:00:07 +00:00
renovate[bot]
84ee805c56 chore(deps): update actions/checkout action to v3.3.0
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 14:18:41 +01:00
renovate[bot]
7428da7a6c chore(deps): update ossf/scorecard-action action to v2.1.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 14:18:04 +01:00
renovate[bot]
4d4c2e90df chore(deps): update github/codeql-action action to v2.1.37
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 09:27:42 +00:00
renovate[bot]
15b0f084a6 chore(deps): update actions/upload-artifact action to v3.1.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 04:06:18 +00:00
Sheogorath
7bb6570c2b ci: Add OpenSSF scorecard setup
This patch enables a new github action that runs on each commit and
updates the HedgeDoc OpenSSF scorecard score, which is a combination of
various project best practices that are actively worked on. This should
help to stay on top of current best practices and provide transparency
for users of HedgeDoc.

References:
https://github.com/ossf/scorecard
https://securityscorecards.dev/

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2023-01-08 22:08:45 +01:00