ci: Bump ossf/scorecard-action from 2.4.4 to 2.5.0 in the actions group #30

Closed
dependabot[bot] wants to merge 1 commits from dependabot/github_actions/actions-dd3649b633 into main
pull from: dependabot/github_actions/actions-dd3649b633
+1 -1
View File
@@ -34,7 +34,7 @@ jobs:
persist-credentials: false
- name: Run Scorecard
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
with:
results_file: scorecard.sarif
results_format: sarif