Relace MCP Server

name: OpenSSF Scorecard on: branch_protection_rule: schedule: - cron: "0 6 * * 1" # Weekly on Monday at 6:00 UTC push: branches: [main] workflow_dispatch: permissions: read-all jobs: analysis: name: Scorecard Analysis runs-on: ubuntu-latest permissions: security-events: write id-token: write steps: - name: Checkout code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false - name: Run Scorecard uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2 with: results_file: results.sarif results_format: sarif publish_results: true - name: Upload SARIF results uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 with: sarif_file: results.sarif