doing a little more checks

Author: emmanuel-knafo

.github/workflows/oss_pygoat-devsecops-advanced.yml

@@ -217,6 +217,14 @@ jobs:
         with:
           base-ref: ${{ github.ref }}
           head-ref: ${{ github.sha }}
+          # Token for the repository. Can be passed in using `{{ secrets.GITHUB_TOKEN }}`.
+          repo-token: ${{ github.token }} # optional, default is ${{ github.token }}
+          # A boolean to determine if license checks should be performed
+          license-check: true # optional
+          # A boolean to determine if vulnerability checks should be performed
+          vulnerability-check: true # optional
+          # Show a summary of the OpenSSF Scorecard scores.
+          show-openssf-scorecard: true # optional
   test-run_devopsshield_scan_linux:
     name: Run DevOps Shield Scan Linux
     needs:

.github/workflows/oss_pygoat-devsecops-basic.yml

@@ -158,6 +158,14 @@ jobs:
         with:
           base-ref: ${{ github.ref }}
           head-ref: ${{ github.sha }}
+          # Token for the repository. Can be passed in using `{{ secrets.GITHUB_TOKEN }}`.
+          repo-token: ${{ github.token }} # optional, default is ${{ github.token }}
+          # A boolean to determine if license checks should be performed
+          license-check: true # optional
+          # A boolean to determine if vulnerability checks should be performed
+          vulnerability-check: true # optional
+          # Show a summary of the OpenSSF Scorecard scores.
+          show-openssf-scorecard: true # optional
   test-run_devopsshield_scan_linux:
     name: Run DevOps Shield Scan Linux
     needs: