BitSight Community MCP Server

--- name: OpenSSF Scorecard report "on": schedule: - cron: "16 8 * * 1" pull_request: push: branches: ["main"] workflow_dispatch: permissions: contents: read jobs: analysis: name: Scorecard analysis if: github.event.repository.default_branch == github.ref_name runs-on: ubuntu-latest permissions: pull-requests: read security-events: write # for github/codeql-action/upload-sarif to upload SARIF results id-token: write # for step-security/harden-runner to fetch OIDC token steps: - name: Harden the runner (Audit all outbound calls) uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 with: egress-policy: audit - name: Checkout repository uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: persist-credentials: false - name: Run analysis uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: results_file: results.sarif results_format: sarif publish_results: true - name: Upload to code-scanning uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 with: sarif_file: results.sarif category: ossf-scorecard