From 22dbc67ba88f379f5572bd8b9391eca00170f394 Mon Sep 17 00:00:00 2001 From: tonyh1306 Date: Wed, 27 May 2026 12:32:37 -0400 Subject: [PATCH 1/5] Add changeset for click-counter and emoji-screen plugins Add changeset for patch updates to button-click-counter and emoji-screen plugins. --- .changeset/slimy-rules-learn.md | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .changeset/slimy-rules-learn.md diff --git a/.changeset/slimy-rules-learn.md b/.changeset/slimy-rules-learn.md new file mode 100644 index 0000000..0385044 --- /dev/null +++ b/.changeset/slimy-rules-learn.md @@ -0,0 +1,6 @@ +--- +"@jspsych/plugin-button-click-counter": patch +"@jspsych/plugin-emoji-screen": patch +--- + +Advance-Key Change in click-counter plugin From 85eee7ba3c6fbb4c3443c981c554c7990ff670aa Mon Sep 17 00:00:00 2001 From: Tony Nguyen Date: Fri, 29 May 2026 04:35:57 -0400 Subject: [PATCH 2/5] add scorecard yml --- .github/workflows/scorecard.yml | 42 +++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/scorecard.yml diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml new file mode 100644 index 0000000..72ccfd7 --- /dev/null +++ b/.github/workflows/scorecard.yml @@ -0,0 +1,42 @@ +name: OSSF Scorecard + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: "30 1 * * 6" + +permissions: + contents: read + +jobs: + analysis: + runs-on: ubuntu-latest + permissions: + # Required when publishing results (badge / API / code scanning) + security-events: write + id-token: write + + # Recommended reads for private repos to avoid GraphQL/SAST gaps + contents: read + issues: read + pull-requests: read + checks: read + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Run Scorecard analysis + uses: ossf/scorecard-action@v2.4.3 + with: + results_file: results.sarif + results_format: sarif + publish_results: true + + - name: Upload results to Code Scanning + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: results.sarif \ No newline at end of file From 58ab40dc2c2499863fa1c92ecf549735dd71582a Mon Sep 17 00:00:00 2001 From: Tony Nguyen Date: Fri, 29 May 2026 04:39:58 -0400 Subject: [PATCH 3/5] fix branch access --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 72ccfd7..f870c84 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -2,7 +2,7 @@ name: OSSF Scorecard on: push: - branches: [main] + branches: [heartbroken-fish-emoji] pull_request: branches: [main] schedule: From 284f1730d2750d8ea8994b74eed0102637523fb7 Mon Sep 17 00:00:00 2001 From: Tony Nguyen Date: Fri, 29 May 2026 05:22:23 -0400 Subject: [PATCH 4/5] toggle results publishing --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index f870c84..fda6181 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -34,7 +34,7 @@ jobs: with: results_file: results.sarif results_format: sarif - publish_results: true + publish_results: false - name: Upload results to Code Scanning uses: github/codeql-action/upload-sarif@v3 From d96a0e73003cd1e3a722bd067a48c60f0d56a0f4 Mon Sep 17 00:00:00 2001 From: Tony Nguyen Date: Fri, 29 May 2026 05:29:17 -0400 Subject: [PATCH 5/5] toggle results publishing --- .github/workflows/scorecard.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index fda6181..72ccfd7 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -2,7 +2,7 @@ name: OSSF Scorecard on: push: - branches: [heartbroken-fish-emoji] + branches: [main] pull_request: branches: [main] schedule: @@ -34,7 +34,7 @@ jobs: with: results_file: results.sarif results_format: sarif - publish_results: false + publish_results: true - name: Upload results to Code Scanning uses: github/codeql-action/upload-sarif@v3