diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 5bb5408..5b2c473 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: ossf/scorecard-monitor@a3a9c4cfa0684480ec5f86fa178fc22c4394b69e # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@diff-test # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json @@ -37,6 +37,8 @@ jobs: report-tags-enabled: true # The token is needed to create issues, discovery mode and pushing changes in files github-token: ${{ secrets.GITHUB_TOKEN }} + positive-threshold: false + negative-threshold: false - name: Create Pull Request uses: gr2m/create-or-update-pull-request-action@77596e3166f328b24613f7082ab30bf2d93079d5