diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 67c2b6b69c..0d51d4d924 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -40,3 +40,11 @@ jobs: name: SARIF file path: results.sarif retention-days: 5 + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v3 + with: + # Path to SARIF file relative to the root of the repository + sarif_file: results.sarif + # Optional category for the results + # Used to differentiate multiple results for one commit + category: ossf-scorecard