actions-marketplace-validations/SPDX Dependency Submission Action
Upload SPDX SBOM files to the dependency graph's dependency submission API
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Personal Access Token (PAT). Defaults to PAT provided by Actions runner. | no | ${{ github.token }} |
| filePath | The path to the directory containing the SPDX files to upload. Defaults to Actions working directory. | no | . |
| filePattern | The file name pattern for SPDX files to upload | no | *.spdx.json |
| correlator | The correlator property itself is the primary field used to keep independent submissions distinct. | no | ${{ github.job }} |
Outputs
no outputs