This is an automated email from the ASF dual-hosted git repository.
pkarwasz pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
The following commit(s) were added to refs/heads/main by this push:
new 91180a2 Update `ossf/scorecard-action` to version `2.4.2` (#399)
91180a2 is described below
commit 91180a240c56ec3429ee167d44f4694ff242cb23
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Jun 10 09:11:03 2025 +0000
Update `ossf/scorecard-action` to version `2.4.2` (#399)
Co-authored-by: ASF Logging Services RM <[email protected]>
---
.github/workflows/scorecards-analysis-reusable.yaml | 2 +-
src/changelog/.12.x.x/update_ossf_scorecard_action.xml | 8 ++++++++
2 files changed, 9 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/scorecards-analysis-reusable.yaml
b/.github/workflows/scorecards-analysis-reusable.yaml
index 226ff6e..4fd9849 100644
--- a/.github/workflows/scorecards-analysis-reusable.yaml
+++ b/.github/workflows/scorecards-analysis-reusable.yaml
@@ -35,7 +35,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186
# 2.4.1
+ uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde
# 2.4.2
with:
results_file: results.sarif
results_format: sarif
diff --git a/src/changelog/.12.x.x/update_ossf_scorecard_action.xml
b/src/changelog/.12.x.x/update_ossf_scorecard_action.xml
new file mode 100644
index 0000000..aa3bea4
--- /dev/null
+++ b/src/changelog/.12.x.x/update_ossf_scorecard_action.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xmlns="https://logging.apache.org/xml/ns";
+ xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="updated">
+ <issue id="399" link="https://github.com/apache/logging-parent/pull/399"/>
+ <description format="asciidoc">Update `ossf/scorecard-action` to version
`2.4.2`</description>
+</entry>
