diff --git a/action.yml b/action.yml index ea62438..420cf00 100644 --- a/action.yml +++ b/action.yml @@ -47,6 +47,9 @@ inputs: comment-summary-in-pr: description: A boolean to determine if the report should be posted as a comment in the PR itself. Setting this to true requires you to give the workflow the write permissions for pull-requests required: false + deny_list: + description: A comma-separated list of dependencies to deny (e.g. "pkg:npm/express, pkg:pip/pycrypto") + required: false runs: using: 'node16' main: 'dist/index.js'