From 1d0829d84c1a6d2d92de5e56de042d6854f45d64 Mon Sep 17 00:00:00 2001 From: Courtney Claessens Date: Wed, 6 Apr 2022 16:00:03 -0400 Subject: [PATCH 1/2] Update README.md --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 48ea01e..7b90546 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,8 @@ # dependency-review-action -This Action scans your pull requests for vulnerabilities introduced -when modifying your project's dependencies. A check in your pull requests will notify you of the results. +This action scans your pull requests for dependency changes and will raise an error if any new dependencies have existing vulnerabilities. The action is supported by an [API endpoint](https://docs.github.com/en/rest/reference/dependency-graph#dependency-review) that diffs the dependencies between any two revisions. + +The action is available for all public repositories, as well as private repositories that have Github Advanced Security licensed. Screen Shot 2022-03-31 at 1 10 51 PM From 27e65b95892222992796280e7767b54641604617 Mon Sep 17 00:00:00 2001 From: Courtney Claessens Date: Wed, 6 Apr 2022 16:03:35 -0400 Subject: [PATCH 2/2] Update action.yml --- action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/action.yml b/action.yml index 68c748a..631d257 100644 --- a/action.yml +++ b/action.yml @@ -1,5 +1,5 @@ name: 'Dependency Review' -description: 'GitHub Action for Dependency Review' +description: 'Prevent the introduction of dependencies with known vulnerabilities' author: 'GitHub' inputs: repo-token: