[llvm] [workflows] Update the version of the scorecard-action (PR #86753)

Diogo Teles Sant'Anna via llvm-commits llvm-commits at lists.llvm.org
Wed Mar 27 06:02:01 PDT 2024


diogoteles08 wrote:

> @diogoteles08

Hi! Thanks for mentioning me.

Yeah, this update will fix it. The error happened because Scorecard uses Sigstore tool to sign its results and Sigstore has done an update (https://blog.sigstore.dev/tuf-root-update/) that is not compatible with older Scorecard versions (for example, v.2.1.2 used here). But Scorecard v2.3.1 is compatible with Sigstore changes and should get back to work smoothly =)

https://github.com/llvm/llvm-project/pull/86753


More information about the llvm-commits mailing list