Bump the github-actions group with 3 updates (#10) #5

	name: run-scorecard

	on:
	push:
	branches:
	# Run on pushes to default branch
	- main
	schedule:
	# Run weekly on Saturdays
	- cron: "30 1 * * 6"
	# Run when branch protection rules change
	branch_protection_rule:
	# Run the workflow manually
	workflow_dispatch:

	# Declare default permissions as read-only
	permissions: read-all

	jobs:
	run-scorecard:
	# Call reusable workflow file
	uses: ./.github/workflows/_scorecard.yml
	permissions:
	id-token: write
	security-events: write
	secrets: inherit
	with:
	# Publish results of Scorecard analysis
	publish-results: true

Provide feedback