Delete Intentfile #706
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: MPL-2.0 | ||
| # Copyright (c) 2026 Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk> | ||
| # | ||
| # Aligned with the documented caller pattern in | ||
| # hyperpolymath/standards .github/workflows/scorecard-reusable.yml. | ||
| # Previously this workflow was startup_failure-on-every-run because it | ||
| # diverged from the reusable's documented caller shape: | ||
| # - missing `concurrency:` group (re-pushes piled up superseded runs) | ||
| # - `branch_protection_rule:` trigger (unused; complicates startup) | ||
| # - `secrets: inherit` against a reusable with no `secrets:` block | ||
| # - `permissions: read-all` instead of explicit `contents: read` | ||
| # Pattern now matches the reusable's header example verbatim. Sister | ||
| # fix landed in hyperpolymath/ephapax#264 (2026-06-01); this PR mirrors | ||
| # it so the two repos stay in sync. | ||
| name: Scorecards supply-chain security | ||
| on: | ||
| push: | ||
| branches: [main] | ||
| schedule: | ||
| - cron: '23 4 * * 1' | ||
| workflow_dispatch: | ||
| concurrency: | ||
| group: ${{ github.workflow }}-${{ github.ref }} | ||
| cancel-in-progress: true | ||
| permissions: | ||
| contents: read | ||
| jobs: | ||
| analysis: | ||
| permissions: | ||
| security-events: write | ||
| id-token: write | ||
| uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 | ||
| timeout-minutes: 10 | ||
