Skip to content

Commit 3550962

Browse files
rgoldbergrgoldberg
authored
Merge pull request #1244 from rgoldberg/7.1.0/1243-ossf-scorecard
2 parents 340d0c0 + 76160a3 commit 3550962

20 files changed

Lines changed: 78 additions & 22 deletions

‎.github/workflows/release-published.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,7 @@ name: release-published
66
on:
77
release:
88
types: [published]
9-
permissions:
10-
actions: read
9+
permissions: {}
1110
defaults:
1211
run:
1312
# Force all run commands to not use Rosetta 2
@@ -17,6 +16,7 @@ jobs:
1716
if: ${{!github.event.repository.fork}}
1817
runs-on: macos-26
1918
permissions:
19+
actions: read
2020
contents: write
2121
pull-requests: write
2222
steps:

‎.github/workflows/scorecard.yaml‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
#
2+
# .github/workflows/scorecard.yaml
3+
#
4+
---
5+
name: OSSF Scorecard
6+
on:
7+
branch_protection_rule:
8+
types: [created, deleted, edited]
9+
pull_request:
10+
branches:
11+
- main
12+
push:
13+
branches: [main]
14+
schedule:
15+
- cron: 27 21 * * 4
16+
workflow_dispatch: {}
17+
permissions: {}
18+
jobs:
19+
analysis:
20+
name: Scorecard analysis
21+
runs-on: ubuntu-latest
22+
if: github.event.repository.default_branch == github.ref_name || github.event_name == 'pull_request'
23+
permissions:
24+
contents: read
25+
security-events: write
26+
id-token: write
27+
steps:
28+
- name: Checkout code
29+
env:
30+
GIT_CONFIG_COUNT: 1
31+
GIT_CONFIG_KEY_0: init.defaultBranch
32+
GIT_CONFIG_VALUE_0: ${{github.event.repository.default_branch}}
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
34+
with:
35+
persist-credentials: false
36+
37+
- name: Run analysis
38+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
39+
with:
40+
results_file: results.sarif
41+
results_format: sarif
42+
repo_token: ${{github.token}}
43+
publish_results: ${{github.event_name != 'pull_request'}}
44+
45+
- name: Upload artifact
46+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
47+
with:
48+
name: SARIF file
49+
path: results.sarif
50+
retention-days: 5
51+
52+
- name: Upload to code-scanning
53+
uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
54+
with:
55+
sarif_file: results.sarif

‎Brewfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ brew "actionlint" # 1.7.12
22
brew "editorconfig-checker" # 3.6.1
33
brew "gh" # 2.92.0
44
brew "git" # 2.54.0
5-
brew "ipsw" # 3.1.672
5+
brew "ipsw" # 3.1.674
66
brew "markdownlint-cli2" # 0.22.1
77
brew "periphery" if MacOS.version >= :sequoia && `/usr/bin/arch` == "arm64" # 3.7.4
88
brew "shellcheck" # 0.11.0

‎GEMINI.md‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,8 @@ Refer to [AGENTS.md](AGENTS.md) for comprehensive guidelines. Key highlights:
6767

6868
### YAML Guidelines
6969

70-
- **Style:** 2 spaces indentation, single quotes for strings, unix newlines.
70+
- **Style:** 2-space indentation, unix newlines, quoted strings only when
71+
necessary, single quotes for strings.
7172
- **Rules:** Forbid non-empty braces, require document start (`---`).
7273

7374
### Zsh Scripting

‎Package.resolved‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Package.swift‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ _ = Package(
2424
.package(url: "https://github.com/apple/swift-atomics.git", from: "1.3.0"),
2525
.package(url: "https://github.com/apple/swift-collections.git", from: "1.4.1"),
2626
.package(url: "https://github.com/attaswift/BigInt.git", from: "5.7.0"),
27-
.package(url: "https://github.com/mas-cli/swift-json.git", from: "3.3.0"),
27+
.package(url: "https://github.com/mas-cli/swift-json.git", from: "3.3.1"),
2828
.package(url: "https://github.com/scinfu/SwiftSoup.git", from: "2.13.4"),
2929
],
3030
targets: [

‎Sources/PrivateFrameworks/include/CommerceKit/CKDownloadQueue.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
//
2-
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.672, BuildCommit: Homebrew)
2+
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.674, BuildCommit: Homebrew)
33
//
44
// - LC_BUILD_VERSION: Platform: macOS, MinOS: 26.2, SDK: 26.2, Tool: ld (1230.3)
55
// - LC_SOURCE_VERSION: 716.2.2.0.0

‎Sources/PrivateFrameworks/include/CommerceKit/CKPurchaseController.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
//
2-
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.672, BuildCommit: Homebrew)
2+
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.674, BuildCommit: Homebrew)
33
//
44
// - LC_BUILD_VERSION: Platform: macOS, MinOS: 26.2, SDK: 26.2, Tool: ld (1230.3)
55
// - LC_SOURCE_VERSION: 716.2.2.0.0

‎Sources/PrivateFrameworks/include/CommerceKit/CKServiceInterface.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
//
2-
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.672, BuildCommit: Homebrew)
2+
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.674, BuildCommit: Homebrew)
33
//
44
// - LC_BUILD_VERSION: Platform: macOS, MinOS: 26.2, SDK: 26.2, Tool: ld (1230.3)
55
// - LC_SOURCE_VERSION: 716.2.2.0.0

‎Sources/PrivateFrameworks/include/CommerceKit/CommerceKit.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
//
2-
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.672, BuildCommit: Homebrew)
2+
// Generated by https://github.com/blacktop/ipsw (Version: 3.1.674, BuildCommit: Homebrew)
33
//
44
// - LC_BUILD_VERSION: Platform: macOS, MinOS: 26.2, SDK: 26.2, Tool: ld (1230.3)
55
// - LC_SOURCE_VERSION: 716.2.2.0.0

0 commit comments

Comments
 (0)