Skip to content

Remove OpenSSF Scorecard#1518

Merged
brianmcgillion merged 1 commit intotiiuae:mainfrom
henrirosten:remove-openssf-scorecard
Nov 10, 2025
Merged

Remove OpenSSF Scorecard#1518
brianmcgillion merged 1 commit intotiiuae:mainfrom
henrirosten:remove-openssf-scorecard

Conversation

@henrirosten
Copy link
Copy Markdown
Collaborator

Description of Changes

Remove publishing OpenSSF Scorecard results and the badge from main README.md.
This change is needed, because currently, the scorecard action fails with an error:

workflow verification failed: workflow verification failed: scorecard job must only have steps with uses, see: https://github.com/ossf/scorecard-action#workflow-restrictions for details.

Which is caused by our manual filtering of the false positives introduced in commit: a7d4367.

To fix the scorecard action we have to either:

(1) stop publishing the scorecard action results, and thus also remove the OpenSSF badge or

(2) revert the commit a7d4367. The downside here is that we would then have to manually keep dismissing the false alerts on Dangerous-Workflow on the Github code scanning dashboard.

This PR implements above option (1).
@brianmcgillion: let me know If you prefer (2) instead, and I'll close this PR and open a new one to revert a7d4367.

Type of Change

  • New Feature
  • Bug Fix
  • Improvement / Refactor

Related Issues / Tickets

Checklist

  • Clear summary in PR description
  • Detailed and meaningful commit message(s)
  • Commits are logically organized and squashed if appropriate
  • Contribution guidelines followed
  • Ghaf documentation updated with the commit - https://tiiuae.github.io/ghaf/
  • Author has run make-checks and it passes
  • All automatic GitHub Action checks pass - see actions
  • Author has added reviewers and removed PR draft status

Testing Instructions

Applicable Targets

  • Orin AGX aarch64
  • Orin NX aarch64
  • Lenovo X1 x86_64
  • Dell Latitude x86_64
  • System 76 x86_64

Installation Method

  • Requires full re-installation
  • Can be updated with nixos-rebuild ... switch
  • Other:

Test Steps To Verify:

  1. ...

Signed-off-by: Henri Rosten <henri.rosten@unikie.com>
@henrirosten henrirosten marked this pull request as ready for review October 31, 2025 07:29
@brianmcgillion brianmcgillion merged commit 8a7f40a into tiiuae:main Nov 10, 2025
28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants