Jiri Tyr

I think the most elegant solution would be to introduce a new [Workflow command](https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions) called `set-secret`. It would work the same way like `set-output` but it would not be outputed...

I quickly checked the [Openstack role](https://github.com/openstack/openstack-ansible-security) role and have these comments: 1. It's using different authority - STIG which [doesn't support](http://iase.disa.mil/stigs/os/unix-linux/Pages/index.aspx) RHEL7 yet. 2. The role doesn't have any check...

Is any of the discussions you had with CIS publicly available? I would be interested to read what they did not like about this initiative (probably that you were stealing...

Hi John. I didn't use Windows since I created this issue so my knowledge has evaporated a little bit ;o) If you have somebody else to speak this time, please...

@mcelep Please could you review this PR?

@Knappek Please could you review this PR?

Yes, it should fix that issue as well.

This is addressed in the [Helm chart PR](https://github.com/mcelep/opa-scorecard/pull/13/files#diff-cf15ec0f42a0a7853e209959a9b90548fb0c3dfcba191b0156c9ca111df5bfc5R31-R38).

@phisco @negz @jbw976 Please could you review this PR? It would be great if it would make it into the v1.16.0 release :crossed_fingers:

@phisco @negz @jbw976 Please could you review this PR? It would be great if it would make it into the next release 🤞