loki/.github/workflows/operator-scorecard.yaml

name: operator scorecard

on:
  push:
    paths:
      - 'operator/**'
    branches: [ main ]
  pull_request:
    paths:
      - 'operator/**'

jobs:
  build:
    name: scorecard
    runs-on: ubuntu-latest
    permissions:
      contents: "read"
    steps:
    - uses: actions/checkout@v5
      with:
        persist-credentials: false
    - name: Set up Go 1.x
      uses: actions/setup-go@v6
      with:
        go-version-file: ./operator/go.mod
        cache-dependency-path: ./operator/go.sum
    - uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
      with:
        version: "v0.30.0"
    - name: Run scorecard
      run: make scorecard
      working-directory: ./operator