dep-scan
Actionsdep-scan is a fully open-source security audit tool for project dependencies based on known vulnerabilities and
advisories
v4
LatestBy AppThreat
Tags
(2)This action wraps OWASP-dep-scan, a fully open-source security audit tool for project dependencies based on known vulnerabilities and advisories. The output is fully compatible with grafeas.
Please consider making a monetary contribution to OWASP-dep-scan. We appreciate your support!
With minimal configuration
- uses: AppThreat/dep-scan-action@master
with:
# The target directory to be scanned. Optional.
src: /github/workspace
# Output file for the generated report. Optional.
report_file: /github/workspace/reports/depscan.json
# Must equal "I have sponsored OWASP-dep-scan" for action to run. Required.
profile: generic
thank_you: "I have not sponsored OWASP-dep-scan."
env:
VDB_HOME: ${{ github.workspace }}/db
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}Upload reports to build artifacts
- uses: AppThreat/dep-scan-action@master
with:
thank_you: "I have sponsored OWASP-dep-scan."
env:
VDB_HOME: ${{ github.workspace }}/db
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- uses: actions/upload-artifact@v4
with:
name: reports
path: reports
dep-scan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
About
v4
LatestBy AppThreat
Tags
(2)dep-scan is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.