From 1e8a128e94c17023d7eae07e9859263b78f1fef6 Mon Sep 17 00:00:00 2001 From: Thomas Boni Date: Fri, 26 Jun 2026 17:18:05 +0200 Subject: [PATCH] ci: bump Plumber action to v0.3.76 and publish Score - Pin getplumber/plumber to v0.3.76 (4d04d1c) - Name the job 'Plumber' - Enable score-push (grants id-token: write) to publish the public Plumber Score badge Co-Authored-By: Claude Opus 4.8 --- .github/workflows/plumber.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/plumber.yml b/.github/workflows/plumber.yml index 9cf9b68..c0e97d5 100644 --- a/.github/workflows/plumber.yml +++ b/.github/workflows/plumber.yml @@ -12,6 +12,7 @@ on: permissions: contents: read security-events: write + id-token: write # required to mint the OIDC id-token for the Plumber Score push concurrency: group: ${{ github.ref }}-${{ github.workflow }} @@ -19,10 +20,12 @@ concurrency: jobs: plumber: - name: CI/CD compliance scan + name: Plumber runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v3.1.0 - name: Run Plumber - uses: getplumber/plumber@303ade500dee048f997bba7934dd54628bf08a3a # v0.3.74 + uses: getplumber/plumber@4d04d1cacca6625bc0e3f08f61f16f9d0367cd27 # v0.3.76 + with: + score-push: true # publish the Plumber Score badge (repo name + score become public)