Salesforce MCP Server

name: Scorecard supply-chain security on: branch_protection_rule: schedule: - cron: '24 0 * * 3' workflow_dispatch: {} permissions: read-all jobs: analysis: name: Scorecard analysis runs-on: ubuntu-latest permissions: security-events: write id-token: write steps: - name: Harden runner uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a with: egress-policy: audit - name: Checkout code uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 with: persist-credentials: false - name: Run analysis uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde with: results_file: results.sarif results_format: sarif publish_results: true # repo_token: ${{ secrets.SCORECARD_TOKEN }} # optional PAT - name: Upload artifact uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: name: SARIF file path: results.sarif retention-days: 5 - name: Upload to code-scanning uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 with: sarif_file: results.sarif