From 014f97d2b0df8109ce11abd081fdc39a0907370a Mon Sep 17 00:00:00 2001 From: Spencer Schrock Date: Wed, 14 Jun 2023 14:36:47 -0700 Subject: [PATCH] Switch recommended badge link to the new viewer. Signed-off-by: Spencer Schrock --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3acd7d44..6464d44b 100644 --- a/README.md +++ b/README.md @@ -121,7 +121,7 @@ Starting with scorecard-action:v2, users can use a REST API to query their lates Starting with scorecard-action:v2, users can add a Scorecard Badge to their README to display the latest status of their Scorecard results. This requires setting [`publish_results: true`](https://github.com/ossf/scorecard/blob/d13ba3f3355b958d5d62edc47282a2e7ed9fa7c1/.github/workflows/scorecard-analysis.yml#L39) for the action and enabling [`id-token: write`](https://github.com/ossf/scorecard/blob/d13ba3f3355b958d5d62edc47282a2e7ed9fa7c1/.github/workflows/scorecard-analysis.yml#L22) permission for the job (needed to access GitHub OIDC token). The badge is updated on every run of scorecard-action and points to the latest result. To add a badge to your README, copy and paste the below line, and replace the {owner} and {repo} parts. ``` -[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/{owner}/{repo}/badge)](https://api.securityscorecards.dev/projects/github.com/{owner}/{repo}) +[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/{owner}/{repo}/badge)](https://securityscorecards.dev/viewer/?platform=github.com&org={owner}&repo={repo}) ``` Once this badge is added, clicking on the badge will take users to the latest run result of Scorecard.