weekly.yml

name: Weekly tests

permissions:
  contents: read

on:
  schedule:
    - cron: "5 0 * * 0"

jobs:

  # To guarantee Maintained check is occasionally updated. See
  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
  scorecard:
    uses: ./.github/workflows/scorecard.yml
    secrets: inherit
    # complete list of permissions keys as per
    # https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token#defining-access-for-the-github_token-permissions
    # accessed September 4, 2024
    permissions:
      actions: read
      attestations: read
      checks: read
      contents: read
      deployments: read
      id-token: write
      issues: read
      discussions: read
      packages: read
      pages: read
      pull-requests: read
      repository-projects: read
      security-events: write
      statuses: read

  extended-tests:
    uses: ./.github/workflows/extended.yml