Update scorecards.yml

Signed-off-by: Cole Kennedy <colek42@gmail.com>
testifysec · Apr 25, 2023 · cad3d3d · cad3d3d
1 parent 94fa2ec
commit cad3d3d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -38,7 +38,7 @@ jobs:
           enable-sigstore: true
           enable-archivista: true
           trace: false
-          step: "build"
+          step: "scorecard"
           attestations: "environment git sarif"
           command:  docker run -v $PWD:/repo -e GITHUB_AUTH_TOKEN=$GITHUB_TOKEN -e ENABLE_SARIF=true gcr.io/openssf/scorecard@sha256:8201c5b7706459cac1d67484dda85cb2fe7ec7492f07012c0be99c12a96f4b8e --repo=github.com/testifysec/galadriel --show-details --policy /repo/.github/workflows/scorecard.policy --format=sarif > results.sarif