Commit da2b440ab for imagemagick.org

commit da2b440abcbfc7ad4e0e28611af1562b7f3f33ca
Author: Dirk Lemstra <dirk@lemstra.org>
Date:   Fri May 8 08:04:40 2026 +0200

    Also run the scorecard workflow in PR's.

diff --git a/.github/workflows/scorecard-analysis.yml b/.github/workflows/scorecard-analysis.yml
index 170b6f7f6..7e7dc9320 100644
--- a/.github/workflows/scorecard-analysis.yml
+++ b/.github/workflows/scorecard-analysis.yml
@@ -7,6 +7,9 @@ on:
     - main
     paths:
     - .github/workflows/scorecard-analysis.yml
+  pull_request:
+    branches:
+    - main

 permissions: read-all

@@ -29,9 +32,10 @@ jobs:
         with:
           results_file: results.sarif
           results_format: sarif
-          publish_results: true
+          publish_results: ${{ github.event_name != 'pull_request' }}

       - name: Upload to code-scanning
+        if: github.event_name != 'pull_request'
         uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 #4.35.2
         with:
           sarif_file: results.sarif