2022-03-31 18:31:39 +02:00
|
|
|
name: 'Dependency Review'
|
2022-04-06 16:03:35 -04:00
|
|
|
description: 'Prevent the introduction of dependencies with known vulnerabilities'
|
2022-03-31 18:31:39 +02:00
|
|
|
author: 'GitHub'
|
|
|
|
|
inputs:
|
|
|
|
|
repo-token:
|
|
|
|
|
description: 'Token for the repository. Can be passed in using `{{ secrets.GITHUB_TOKEN }}`.'
|
|
|
|
|
required: false
|
|
|
|
|
default: ${{ github.token }}
|
2022-06-14 07:40:16 +02:00
|
|
|
fail-on-severity:
|
|
|
|
|
description: 'Don't block PRs below this severity. Possible values are `low`, `moderate`, `high`, `critical`.'
|
|
|
|
|
required: false
|
|
|
|
|
default: 'low'
|
|
|
|
|
allow_licenses:
|
|
|
|
|
description: Comma-separated list of allowed licenses (e.g. "MIT, GPL 3.0, BSD 2 Clause")
|
|
|
|
|
required: false
|
|
|
|
|
deny_licenses:
|
|
|
|
|
description: Comma-separated list of forbidden licenses (e.g. "MIT, GPL 3.0, BSD 2 Clause")
|
|
|
|
|
required: false
|
2022-03-31 18:31:39 +02:00
|
|
|
runs:
|
|
|
|
|
using: 'node16'
|
|
|
|
|
main: 'dist/index.js'
|
