✨ Add custom remediation for workflow permissions/pinned dependencies

[laurentsimon]

Add custom remediation for workflow permissions/pinned dependencies

Add custom remediation for workflow permissions/pinned dependencies

see #1850

Screenshot:

[codecov]

Codecov Report

Merging #1885 (e73fd67) into main (22694dc) will increase coverage by 2.96%.
The diff coverage is 62.50%.

@@            Coverage Diff             @@
##             main    #1885      +/-   ##
==========================================
+ Coverage   51.32%   54.28%   +2.96%     
==========================================
  Files          79       80       +1     
  Lines        6740     6797      +57     
==========================================
+ Hits         3459     3690     +231     
+ Misses       3050     2870     -180     
- Partials      231      237       +6     

[laurentsimon]

/cc @varunsh-coder

[github-actions]

Integration tests success for
[fc8ef6c]
(https://github.com/ossf/scorecard/actions/runs/2272045080)

[github-actions]

Integration tests success for
[58cdee4]
(https://github.com/ossf/scorecard/actions/runs/2272048496)

[github-actions]

Integration tests success for
[dc46c23]
(https://github.com/ossf/scorecard/actions/runs/2272055726)

[github-actions]

Integration tests success for
[ac7232a]
(https://github.com/ossf/scorecard/actions/runs/2272063546)

[github-actions]

Integration tests success for
[683a44a]
(https://github.com/ossf/scorecard/actions/runs/2272099017)

[laurentsimon]

Fyi, the protobuf-related checks have started failing again over the past few days

[varunsh-coder]

@laurentsimon thanks a lot for the PR! Great to see remediation being added. I added couple of comments. Do you have a screenshot of how this looks right now? I am curious how remediation info will show up in the GitHub Code Scanning UI.

[laurentsimon]

@laurentsimon thanks a lot for the PR! Great to see remediation being added. I added couple of comments. Do you have a screenshot of how this looks right now? I am curious how remediation info will show up in the GitHub Code Scanning UI.

I added the screenshot in the PR description. PTAL

[github-actions]

Integration tests success for
[f1ff602]
(https://github.com/ossf/scorecard/actions/runs/2272889822)

[laurentsimon]

friendly ping for a review.

[github-actions]

Integration tests success for
[c764305]
(https://github.com/ossf/scorecard/actions/runs/2282735247)

[github-actions]

Integration tests success for
[e73fd67]
(https://github.com/ossf/scorecard/actions/runs/2283562630)