51 lines
2.7 KiB
YAML
51 lines
2.7 KiB
YAML
name: 'Component Detection dependency submission action'
|
|
description: 'Upload information about your dependencies to the GitHub dependency graph using dependency submission API. '
|
|
inputs:
|
|
token:
|
|
description: "GitHub Personal Access Token (PAT). Defaults to PAT provided by Actions runner."
|
|
required: false
|
|
default: ${{ github.token }}
|
|
filePath:
|
|
description: 'The path to the directory containing the environment files to upload. Defaults to Actions working directory.'
|
|
required: false
|
|
default: '.'
|
|
directoryExclusionList:
|
|
description: 'Filters out specific directories following a minimatch pattern.'
|
|
required: false
|
|
detectorArgs:
|
|
description: 'Comma separated list of properties that can affect the detectors execution, like EnableIfDefaultOff that allows a specific detector that is in beta to run, the format for this property is DetectorId=EnableIfDefaultOff, for example Pip=EnableIfDefaultOff.'
|
|
required: false
|
|
dockerImagesToScan:
|
|
description: 'Comma separated list of docker image names or hashes to execute container scanning on, ex: ubuntu:16.04,56bab49eef2ef07505f6a1b0d5bd3a601dfc3c76ad4460f24c91d6fa298369ab'
|
|
required: false
|
|
detectorsFilter:
|
|
description: 'A comma separated list with the identifiers of the specific detectors to be used. This is meant to be used for testing purposes only.'
|
|
required: false
|
|
detectorsCategories:
|
|
description: 'A comma separated list with the categories of components that are going to be scanned. The detectors that are going to run are the ones that belongs to the categories. The possible values are: Npm, NuGet, Maven, RubyGems, Cargo, Pip, GoMod, CocoaPods, Linux.'
|
|
required: false
|
|
correlator:
|
|
description: 'An optional identifier to distinguish between multiple dependency snapshots of the same type.'
|
|
required: false
|
|
detector-name:
|
|
description: 'The name of the detector. If provided, detector-version and detector-url must also be provided.'
|
|
required: false
|
|
detector-version:
|
|
description: 'The version of the detector. If provided, detector-name and detector-url must also be provided.'
|
|
required: false
|
|
detector-url:
|
|
description: 'The URL of the detector. If provided, detector-name and detector-version must also be provided.'
|
|
required: false
|
|
snapshot-sha:
|
|
description: 'The SHA of the commit to associate with the snapshot. If provided, snapshot-ref must also be provided.'
|
|
required: false
|
|
snapshot-ref:
|
|
description: 'The Git reference to associate with the snapshot. If provided, snapshot-sha must also be provided.'
|
|
required: false
|
|
runs:
|
|
using: 'node20'
|
|
main: 'dist/index.js'
|
|
branding:
|
|
icon: 'upload-cloud'
|
|
color: 'blue'
|