actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #20 from courtneycl/main

Browse Source 
Update content
This commit is contained in:
Lane Seppala
2022-04-06 14:11:01 -06:00
committed by GitHub
parent e0e026c756 27e65b9589
commit f7d534938a
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@@ -1,7 +1,8 @@
# dependency-review-action
This Action scans your pull requests for vulnerabilities introduced
when modifying your project's dependencies. A check in your pull requests will notify you of the results.
This action scans your pull requests for dependency changes and will raise an error if any new dependencies have existing vulnerabilities. The action is supported by an [API endpoint](https://docs.github.com/en/rest/reference/dependency-graph#dependency-review) that diffs the dependencies between any two revisions.
The action is available for all public repositories, as well as private repositories that have Github Advanced Security licensed.
<img width="854" alt="Screen Shot 2022-03-31 at 1 10 51 PM" src="https://user-images.githubusercontent.com/2161/161042286-b22d7dd3-13cb-458d-8744-ce70ed9bf562.png">

2
action.yml
View File

@@ -1,5 +1,5 @@
name: 'Dependency Review'
description: 'GitHub Action for Dependency Review'
description: 'Prevent the introduction of dependencies with known vulnerabilities'
author: 'GitHub'
inputs:
repo-token: