diff --git a/src/main.ts b/src/main.ts index cc74c72e7..2a65efff8 100644 --- a/src/main.ts +++ b/src/main.ts @@ -186,8 +186,11 @@ async function run(): Promise { ) // generate informational scorecard entries for all added changes in the PR - const scorecardChanges = getScorecardChanges(changes) - const scorecard = await getScorecardLevels(scorecardChanges) + let scorecard: Scorecard = {dependencies: []} + if (config.show_openssf_scorecard) { + const scorecardChanges = getScorecardChanges(changes) + scorecard = await getScorecardLevels(scorecardChanges) + } const minSummary = summary.addSummaryToSummary( vulnerableChanges,