Repository navigation

fix: address OpenSSF Scorecard findings - #20

Merged

don-petry merged 6 commits into

mainfrom

scorecard-fixes

Mar 28, 2026

Merged

fix: address OpenSSF Scorecard findings#20
don-petry merged 6 commits into
mainfrom
scorecard-fixes

SonarQubeCloud / SonarCloud Code Analysis failed Mar 27, 2026 in 18s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 8 in .github/workflows/dependabot-automerge.yml

sonarqubecloud / SonarCloud Code Analysis

Replace "read-all" with specific permissions (e.g., "contents: read").

See more on https://sonarcloud.io/project/issues?id=petry-projects_markets&issues=AZ0xDClXPAYx8a-QBtsY&open=AZ0xDClXPAYx8a-QBtsY&pullRequest=20

Check warning on line 11 in .github/workflows/codeql.yml

sonarqubecloud / SonarCloud Code Analysis

Replace "read-all" with specific permissions (e.g., "contents: read").

See more on https://sonarcloud.io/project/issues?id=petry-projects_markets&issues=AZ0xDClfPAYx8a-QBtsZ&open=AZ0xDClfPAYx8a-QBtsZ&pullRequest=20

Check warning on line 3 in .github/workflows/sonarcloud.yml

sonarqubecloud / SonarCloud Code Analysis

Replace "read-all" with specific permissions (e.g., "contents: read").

See more on https://sonarcloud.io/project/issues?id=petry-projects_markets&issues=AZ0xDCiQPAYx8a-QBtsW&open=AZ0xDCiQPAYx8a-QBtsW&pullRequest=20

Check warning on line 12 in .github/workflows/claude.yml

sonarqubecloud / SonarCloud Code Analysis

Replace "read-all" with specific permissions (e.g., "contents: read").

See more on https://sonarcloud.io/project/issues?id=petry-projects_markets&issues=AZ0xDClEPAYx8a-QBtsX&open=AZ0xDClEPAYx8a-QBtsX&pullRequest=20

View more details on SonarQubeCloud