-
Notifications
You must be signed in to change notification settings - Fork 70
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update to hash #63
Comments
good point. We're not using the starter-workflow in this repo. I created them to keep a copy from https://github.com/actions/starter-workflows/blob/main/code-scanning/scorecards.yml. I now realize that may be a pain to keep them in sync all the time. Shall we remove them from our repo? wdut? |
I think we should remove it. |
Can you send a PR for that? I'll LGTM. I'd like to keep track of how to do releases. There's an issue I created with steps to follow that indicate where to update the starter workflows. How about creating a RELEASE.md with those steps? |
We shouldn't remove this. Teams are directly using this action https://github.com/google/licensecheck/blob/db1987b6bdd30a6777a02509214b17063deff3c8/.github/workflows/scorecards-analysis.yml#L30 |
what I mean is that the local file The local copy can be removed without impacting any team, as it's not used for anything at all. |
scorecard-action/starter-workflows/code-scanning/scorecards.yml
Line 28 in 25e5ca0
The text was updated successfully, but these errors were encountered: