From 2d9e88450fab9ae2484422b7007b1cceb1e22ec4 Mon Sep 17 00:00:00 2001 From: Mark Alexander Date: Wed, 7 Oct 2026 06:50:01 +1000 Subject: [PATCH 1/2] fix: use the case-sensitive org login in the OpenSSF Scorecard badge --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 7a58da8..76ae111 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,8 @@ [![CI](https://github.com/continuous-actions/go-tokenless/actions/workflows/ci.yml/badge.svg)](https://github.com/continuous-actions/go-tokenless/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/go-tokenless?logo=npm)](https://www.npmjs.com/package/go-tokenless) [![MCP Registry](https://img.shields.io/badge/MCP_Registry-go--tokenless-blue)](https://registry.modelcontextprotocol.io/v0/servers?search=go-tokenless) -[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/continuous-actions/go-tokenless/badge)](https://scorecard.dev/viewer/?uri=github.com/continuous-actions/go-tokenless) + +[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/Continuous-Actions/go-tokenless/badge)](https://scorecard.dev/viewer/?uri=github.com/Continuous-Actions/go-tokenless) [![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE) **Delete your `NPM_TOKEN`.** One command switches npm publishing in GitHub Actions to [trusted publishing](https://docs.npmjs.com/trusted-publishers) (OIDC). No long-lived token is stored anywhere, and every release gets a provenance badge. From b99d2fc8117c0ae9be63c3d4ca477c7d710b0e45 Mon Sep 17 00:00:00 2001 From: Mark Alexander Date: Wed, 7 Oct 2026 06:52:55 +1000 Subject: [PATCH 2/2] fix: keep the badge row on one line --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 76ae111..29f3cea 100644 --- a/README.md +++ b/README.md @@ -4,10 +4,10 @@ # go-tokenless + [![CI](https://github.com/continuous-actions/go-tokenless/actions/workflows/ci.yml/badge.svg)](https://github.com/continuous-actions/go-tokenless/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/go-tokenless?logo=npm)](https://www.npmjs.com/package/go-tokenless) [![MCP Registry](https://img.shields.io/badge/MCP_Registry-go--tokenless-blue)](https://registry.modelcontextprotocol.io/v0/servers?search=go-tokenless) - [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/Continuous-Actions/go-tokenless/badge)](https://scorecard.dev/viewer/?uri=github.com/Continuous-Actions/go-tokenless) [![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)