Skip to content

ci: add pull_request trigger to Scorecard workflow - #29

Closed
shwetaverma14 wants to merge 1 commit into
hyphae:mainfrom
shwetaverma14:fix-scorecard-workflow
Closed

shwetaverma14 wants to merge 1 commit into
hyphae:mainfrom
shwetaverma14:fix-scorecard-workflow

Conversation

@shwetaverma14

Copy link
Copy Markdown
Contributor

What this PR does

Adds pull_request trigger to the Scorecard supply-chain security workflow so it runs on PRs.

Why

Currently, Scorecard only runs on the main branch. This means:

  • PRs show "waiting for Scorecard results"
  • Scorecard improvements can't be verified before merging
  • Security analysis is delayed until after merge

Changes

  • Added pull_request trigger to .github/workflows/scorecard.yml
  • Scorecard will now run on every PR to main

Testing

✅ Scorecard workflow syntax is valid
✅ Will run on this PR once merged

Related

This is a prerequisite for PR #28 (Vert.x 3.9 compatibility) which needs Scorecard to pass.

Fixes the Scorecard waiting issue for future PRs.

Signed-off-by: Shweta Verma <shwetaverma1404040@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant