Consider ko-build/setup-ko as a packaging workflow (#2692)

Signed-off-by: Jason Hall <jason@chainguard.dev>
ossf · Feb 23, 2023 · 78069d8 · 78069d8
1 parent db6a26e
commit 78069d8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/checks/fileparser/github_workflow.go b/checks/fileparser/github_workflow.go
@@ -559,6 +559,9 @@ func IsPackagingWorkflow(workflow *actionlint.Workflow, fp string) (JobMatchResu
 				{
 					Uses: "imjasonh/setup-ko",
 				},
+				{
+					Uses: "ko-build/setup-ko",
+				},
 			},
 			LogText: "candidate container publishing workflow using ko",
 		},