From e3ae810e95b506304a911fc1343634b19ab10826 Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 19:42:01 -0500 Subject: [PATCH 1/7] Update Scorecard Monitor action to new repository --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 5bb5408..1796133 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: ossf/scorecard-monitor@a3a9c4cfa0684480ec5f86fa178fc22c4394b69e # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@diff # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From 7ebd83388024349723bfc748dfe8ab4f5855a63d Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 19:56:18 -0500 Subject: [PATCH 2/7] Update OpenSSF Scorecard Monitor action version --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 1796133..0d41eef 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: bjohansebas/scorecard-monitor@diff # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@v2.0.0 # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From 6966d4605f1b260aac7c277edbe71b18c1edd3bf Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 20:00:09 -0500 Subject: [PATCH 3/7] Update OpenSSF Scorecard Monitor to version 2.0.1 --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 0d41eef..b4c1c3f 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: bjohansebas/scorecard-monitor@v2.0.0 # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@v2.0.1 # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From 172bc8a1e298d0019742d38b2f6665713b2157b3 Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 20:08:34 -0500 Subject: [PATCH 4/7] Update OpenSSF Scorecard Monitor to version 2 --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index b4c1c3f..3716391 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: bjohansebas/scorecard-monitor@v2.0.1 # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@v2 # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From 5346fcef7628aa6af4a2428cfad29eafdc1ba169 Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 20:11:11 -0500 Subject: [PATCH 5/7] Update OpenSSF Scorecard Monitor to version 2.1.0 --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 3716391..6d98160 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: bjohansebas/scorecard-monitor@v2 # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@v2.1.0 # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From b290d76187cff16bde6edf8970b0df13bef7747f Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 20:23:27 -0500 Subject: [PATCH 6/7] Update OpenSSF Scorecard Monitor action version --- .github/workflows/ossf-scorecard-reporting.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index 6d98160..f73de13 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: OpenSSF Scorecard Monitor - uses: bjohansebas/scorecard-monitor@v2.1.0 # v2.0.0-beta8 + uses: bjohansebas/scorecard-monitor@diff-test # v2.0.0-beta8 with: scope: tools/ossf_scorecard/scope.json database: tools/ossf_scorecard/database.json From be2e74fd81ebc4d11dcd594cc5bc9e5bc607f31e Mon Sep 17 00:00:00 2001 From: Sebastian Beltran Date: Fri, 9 Jan 2026 20:55:41 -0500 Subject: [PATCH 7/7] Remove positive and negative threshold settings --- .github/workflows/ossf-scorecard-reporting.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ossf-scorecard-reporting.yml b/.github/workflows/ossf-scorecard-reporting.yml index f73de13..5b2c473 100644 --- a/.github/workflows/ossf-scorecard-reporting.yml +++ b/.github/workflows/ossf-scorecard-reporting.yml @@ -37,6 +37,8 @@ jobs: report-tags-enabled: true # The token is needed to create issues, discovery mode and pushing changes in files github-token: ${{ secrets.GITHUB_TOKEN }} + positive-threshold: false + negative-threshold: false - name: Create Pull Request uses: gr2m/create-or-update-pull-request-action@77596e3166f328b24613f7082ab30bf2d93079d5