diff --git a/main.go b/main.go index 728375b2..4d1629a3 100644 --- a/main.go +++ b/main.go @@ -17,7 +17,6 @@ package main import ( "log" "os" - "strings" "github.com/ossf/scorecard-action/entrypoint" "github.com/ossf/scorecard-action/options" @@ -35,7 +34,8 @@ func main() { } if os.Getenv(options.EnvInputPublishResults) == "true" && - !strings.HasPrefix(os.Getenv("GITHUB_EVENT_NAME"), "pull_request") { + // `pull_request` do not have the necessary `token-id: write` permissions. + os.Getenv("GITHUB_EVENT_NAME") != "pull_request" { // Get json results by re-running scorecard. jsonPayload, err := signing.GetJSONScorecardResults() if err != nil {