## Copyright (C) 2026 - 2026 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.

## AI-Assisted

## Managed by pkg_update_consumer_workflows. Byte-identical
## across consumers; this file is `cp`-ed from
## developer-meta-files/consumer-templates/.github/workflows/consumer-scorecard.yml.
## DO NOT hand-edit this file in the consumer repo - changes
## will be overwritten on the next propagation pass.
##
## Cron slot is uniform org-wide (per agents/github-actions-
## consumer-templates.md "Scheduling in byte-identical templates").
## GitHub's cron queue serializes the simultaneous fires;
## Scorecard's low value-to-noise ratio makes the queue
## contention acceptable.
##
## Reusable docs:
## https://github.com/org-ai-assisted/developer-meta-files/blob/master/.github/workflows/reusable-scorecard.yml

name: Scorecard

on:
  branch_protection_rule:
  schedule:
    - cron: '0 6 * * 0'
  push:
    branches: [master]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  scorecard:
    uses: org-ai-assisted/developer-meta-files/.github/workflows/reusable-scorecard.yml@master
    permissions:
      security-events: write
      contents: read
      actions: read
