diff --git a/README.md b/README.md index 2cde4532..8fccbe56 100644 --- a/README.md +++ b/README.md @@ -40,7 +40,7 @@ Private repositories: Scorecards requires authentication using a Personal Access Public repositories: One Scorecards check ([Branch-Protection](https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection)) requires authentication using a Personal Access Token (PAT). If you want all Scorecards checks to run on a public repository, you will need to follow the optional Authentication step. If you don't, all checks will run except Branch-Protection. -Optional Authentication: Create a Personal Access Token (PAT) for authentication and save the token value as a repository secret; (Note: If you have already installed Scorecards on your repository from the command line, you can reuse your existing PAT for the repository secret. If you no longer have access to the PAT, though, simply create a new one.) +Optional Authentication: Create a Personal Access Token (PAT) for authentication and save the token value as a repository secret. (Note: If you have already installed Scorecards on your repository from the command line, you can reuse your existing PAT for the repository secret. If you no longer have access to the PAT, though, simply create a new one.) **Required**: Set up the workflow via the GitHub UI - see [Workflow Setup](#workflow-setup)