This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-io.git

commit 1ba3cbdd8451a600f5c1fd802639041b198e1ce2
Author: Gary Gregory <gardgreg...@gmail.com>
AuthorDate: Sat Sep 17 15:28:16 2022 -0400

    Revert "Bump ossf/scorecard-action from 1.1.2 to 2.0.3"
    
    This reverts commit c81bb87676a99af173aaaf9f84f267f97fd04b84.
---
 .github/workflows/scorecards-analysis.yml | 2 +-
 src/changes/changes.xml                   | 3 ---
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/scorecards-analysis.yml 
b/.github/workflows/scorecards-analysis.yml
index d0b95e42..abd69927 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -43,7 +43,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@865b4092859256271290c77adbd10a43f4779972   
 # 1.1.2
+        uses: ossf/scorecard-action@ce330fde6b1a5c9c75b417e7efc510b822a35564   
 # 1.1.2
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 457f27af..7e2488b3 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -524,9 +524,6 @@ The <action> type attribute can be add,update,fix,remove.
       <action dev="kinow" type="update" due-to="Dependabot">
         Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0 #376.
       </action>
-      <action dev="kinow" type="update" due-to="Dependabot">
-        Bump ossf/scorecard-action from 1.1.2 to 2.0.3 #384.
-      </action>
     </release>
     <release version="2.11.0" date="2021-07-09" description="Java 8 required.">
       <!-- FIX -->

Reply via email to