ci: Run scorecard only on push to main

Scorecard should be used as a reactive tool and is not supported for running in PRs. See ossf/scorecard-action#1019
sscheib · Jun 18, 2024 · c5ed67e · c5ed67e
1 parent 6d51e34
commit c5ed67e
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -11,9 +11,6 @@ on: # yamllint disable-line rule:truthy
  push:
  branches:
  - 'main'
- pull_request:
- branches:
- - 'main'
  workflow_dispatch: {}
 
 # Declare default permissions as read only.