ci: run shared Scorecard scans on pull requests - #745

Merged

hyperpolymath merged 6 commits into

mainfrom

codex/proof-stack-scorecard-20260907

Sep 8, 2026

Commits on Sep 7, 2026

ci: support pull-request Scorecard analysis in the shared workflow
hyperpolymath
committed
ca43509
Merge branch 'main' into codex/proof-stack-scorecard-20260907
hyperpolymath
authored
76a530b
ci(scorecard): check out the PR head SHA so the analysis satisfies the ruleset
hyperpolymath
committed
0eda9f2
ci(scorecard): fix indentation of the checkout ref key
hyperpolymath
committed
703b610
ci(scorecard): give PR scans all three Scorecard categories

hyperpolymath
and
claude
committed
7d33e8f
ci(scorecard): enforce HTTPS on the two pinned downloads

hyperpolymath
and
claude
committed
fccb5cf