Main changes
This release lets you run Scorecards without creating a PAT token. If you don't provide a PAT token, Scorecards will use the default GITHUB_TOKEN available in the workflow. Due to limitations of the permissions model and GitHub APIs, be aware of the following limitations:
- Without a PAT, the Branch-Protection is not supported, so it will be disabled. You will not receive alerts for this check.
- Scorecards only supports PAT on private repositories. If you want to install Scorecards on a private repository, you still need to use a PAT.
For more information, visit the README.md
New Contributors
- @rohankh532 made their first contribution in #112
- @justaugustus made their first contribution in #126
- @jamietanna made their first contribution in #145
- @jonasbb made their first contribution in #129
- @azeemshaikh38 made their first contribution in #247
Full Changelog: v1.0.4...v1.1.0
Contributors
jonasbb, justaugustus, and 3 other contributors