From 589fba3441ed20d03afa31e6636f6c1fbb397a0b Mon Sep 17 00:00:00 2001
From: David Condrey <davidcondrey@me.com>
Date: Tue, 4 Aug 2026 02:43:10 -0700
Subject: [PATCH] ci: allow Scorecard to be run on demand

---
 .github/workflows/scorecard.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 559d52a..59c2436 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -3,11 +3,14 @@
 name: Scorecard
 
 on:
+  # Fires for CLASSIC branch protection only. `main` is governed by a repository ruleset, which raises
+  # no event, so a ruleset change reaches Scorecard via the push/schedule triggers or by hand below.
   branch_protection_rule:
   schedule:
     - cron: '27 4 * * 1'
   push:
     branches: [main]
+  workflow_dispatch:
 
 permissions:
   contents: read