From 8aea50652ce90a99e568e57aa5bd041345a2228c Mon Sep 17 00:00:00 2001 From: Tim Pugh Date: Tue, 7 Jul 2026 09:26:21 -0700 Subject: [PATCH] ci: add workflow_dispatch trigger to OpenSSF Scorecard workflow Lets the Scorecard scan be re-run on demand (gh workflow run scorecard.yml or the Actions UI) instead of waiting for the next push to main or the weekly cron. Useful for refreshing the published score after a posture change or once the repo ages past a time-based check such as Maintained, which scores 0 for repos younger than 90 days. --- .github/workflows/scorecard.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index b978a4d..1f61bfb 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -8,6 +8,10 @@ name: OpenSSF Scorecard # settings change quietly weakened the posture. on: + # Manual trigger — re-run on demand (e.g. to refresh the published score after + # a posture change, or once the repo ages past a time-based check such as + # "Maintained", which zeroes out for repos younger than 90 days). + workflow_dispatch: branch_protection_rule: push: branches: [main]