OpenSSF Scorecard Monitor #29

	name: OpenSSF Scorecard Monitor

	on:
	schedule:
	# Runs on the first Sunday of each month at 00:00 UTC
	- cron: '0 0 1 * *'
	# Manual trigger
	workflow_dispatch:

	# Permissions required to run this workflow (create issue and commit/push changes)
	permissions:
	contents: write
	pull-requests: write
	issues: write
	packages: none

	jobs:
	security-scoring:
	runs-on: ubuntu-latest
	steps:
	- name: Git Checkout
	uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2

	- name: OpenSSF Scorecard Monitor
	uses: ossf/scorecard-monitor@a3a9c4cfa0684480ec5f86fa178fc22c4394b69e # v2.0.0-beta8
	with:
	scope: tools/ossf_scorecard/scope.json
	database: tools/ossf_scorecard/database.json
	report: tools/ossf_scorecard/report.md
	auto-commit: false
	auto-push: false
	generate-issue: true
	issue-title: "OpenSSF Scorecard Report updated!"
	max-request-in-parallel: 10
	discovery-enabled: true
	discovery-orgs: 'expressjs,pillarjs,jshttp'
	report-tags-enabled: true
	# The token is needed to create issues, discovery mode and pushing changes in files
	github-token: ${{ secrets.GITHUB_TOKEN }}

	- name: Create Pull Request
	uses: gr2m/create-or-update-pull-request-action@77596e3166f328b24613f7082ab30bf2d93079d5
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	with:
	commit-message: 'docs: OpenSSF Scorecard Report updated'
	title: OpenSSF Scorecard Report updated
	body: 'OpenSSF Scorecard Report updated.'
	assignees: ${{ github.actor }}
	labels: security-wg-agenda
	branch: openssf-scorecard-report-updated
	update-pull-request-title-and-body: true

Provide feedback