diff --git a/.github/workflows/ossf.yml b/.github/workflows/ossf.yml new file mode 100644 index 0000000000..3b9bc254ee --- /dev/null +++ b/.github/workflows/ossf.yml @@ -0,0 +1,22 @@ +name: OSSF Scorecard Weekly + +on: + schedule: + - cron: '0 0 * * 0' # Runs every Sunday at midnight UTC + workflow_dispatch: + +jobs: + ossf-scorecard: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Publish OSSF Scorecard badge to README + uses: ossf/scorecard-action@v2 + with: + publish_results: true + badge: true + branch: main + readme_path: README.md + diff --git a/README.md b/README.md index 1584c793d0..7b1389318d 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,5 @@ +[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/google/googletest/badge)](https://securityscorecards.dev/viewer/?uri=github.com/google/googletest) + # GoogleTest ### Announcements