From 3658fe2cb1bada74a03940badf6781f3eb512afe Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Oct 2026 02:36:43 +0000 Subject: [PATCH] chore(ci): bump NDDev-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml Bumps [NDDev-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml](https://github.com/nddev-opennetwork/ci-workflows) from 0.1.24 to 0.1.29. - [Release notes](https://github.com/nddev-opennetwork/ci-workflows/releases) - [Changelog](https://github.com/NDDev-OpenNetwork/ci-workflows/blob/main/CHANGELOG.md) - [Commits](https://github.com/nddev-opennetwork/ci-workflows/compare/37a827f921f62353664fc4bcd872f05b65efe71a...d92026cf31a10a0eeaa532e1f323c7cfdfbfac5b) --- updated-dependencies: - dependency-name: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml dependency-version: 0.1.29 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 468e3a7..25233b5 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -52,7 +52,7 @@ jobs: contents: read id-token: write # mints the OIDC token its publication is signed with security-events: write # Scorecard publishes its findings to code scanning - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-scorecard.yml@d92026cf31a10a0eeaa532e1f323c7cfdfbfac5b # 0.1.29 osv: name: osv