Repository navigation
👷 ci(scorecard): share analysis job - #42
Merged
Merged
Conversation
This was referenced Nov 3, 2026
gaborbernat
added a commit
to gaborbernat/mdformat-hugo
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to gaborbernat/all-repos-self
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to gaborbernat/bernat-tech
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to gaborbernat/cv
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/pre-commit-uv
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/sphinx-argparse-cli
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/action-pre-commit-uv
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/devpi-process
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to pypa/pipx
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/sphinx-autodoc-typehints
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/tox
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for tox and show its score alongside the [Best Practices](https://www.bestpractices.dev/projects/16248) registration in the README. The analysis runs through the shared workflow in [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository owns its triggers and token permissions.
gaborbernat
added a commit
to tox-dev/tox-ini-fmt
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/tox-uv
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/python-discovery
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/toml-fmt
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
that referenced
this pull request
Nov 3, 2026
[The shared Scorecard workflow](#42) merged without a Towncrier fragment. Add a release note so the next `github-workflows` release names the new caller-facing workflow.
gaborbernat
added a commit
to tox-dev/xml-fmt
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/PyVenvManage
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to gaborbernat/gaborbernat
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/jetbrains-fish
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to gaborbernat/simplint
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to pypa/virtualenv
that referenced
this pull request
Nov 3, 2026
Keep virtualenv's existing [OpenSSF Scorecard](https://scorecard.dev/viewer/?uri=github.com/pypa/virtualenv) publication while sharing the analysis job with the other projects. [tox-dev/github-workflows#42](tox-dev/github-workflows#42) now owns the analysis and SARIF upload; virtualenv retains its triggers and token permissions.
gaborbernat
added a commit
to tox-dev/tox-gh
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/pyproject-api
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/mdformat-zola
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/platformdirs
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/peryx
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/pipdeptree
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
gaborbernat
added a commit
to tox-dev/filelock
that referenced
this pull request
Nov 3, 2026
Publish [OpenSSF Scorecard](https://scorecard.dev/) results for this repository and show its score in the README. The README also links its new Best Practices registration. Analysis runs through [tox-dev/github-workflows#42](tox-dev/github-workflows#42); this repository controls the triggers and token permissions.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The projects listed on bernat.tech/oss need Scorecard results and badges. This shared workflow keeps the analysis and SARIF upload in one place; each project retains its own triggers and token permissions. GitHub supports cross-repository reusable workflows with caller-granted permissions.