diff --git a/pkg/scorecard.go b/pkg/scorecard.go
index 6cca73482bd..b8c1a4e1691 100644
--- a/pkg/scorecard.go
+++ b/pkg/scorecard.go
@@ -127,6 +127,7 @@ func RunScorecard(ctx context.Context,
 	} else if err != nil {
 		return ScorecardResult{}, err
 	}
+	ret.Repo.CommitSHA = commitSHA
 
 	defaultBranch, err := repoClient.GetDefaultBranchName()
 	if err != nil {