actions-marketplace-validations/Run ORT

Run oss-review-toolkit to review Open Source software dependencies.

Trust Signals

workflow.ymlSHA-pinned

uses: actions-marketplace-validations/edulix_ort-action@aaaf513f4ffdfdd3b70286dc884f35ce252dc9f3 # no releases — HEAD as of 2026-07-13

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
ort-version	edulix/ort docker hub tag to use.	no	latest
analyze	Set to `false` to disable the execution of the ORT `analyze` ORT Action. Default: `true`.	no	true
evaluate	Set to `false` to disable the execution of the ORT `evaluate` ORT Action. Default: `true`.	no	true
report	Set to `false` to disable the execution of the ORT `report` ORT Action. Default: `true`.	no	true
verbosity	Verbosity level in ORT to use. Possible values: [ `warn`, `info`, `performance`, `debug`]. Default to `warn`.	no	warn
package-curations-dir	Specifies path relative to the project directory for the curations directory. Used in `analyze` and `evaluate` actions. It's the `--package-curations-dir` option for ORT.	no	—
rules-file	Specifies path relative to the project directory for the rules of the `evaluate` action. It's the `--rules-file` option for ORT.	no	—
license-classifications-file	Specifies path relative to the project directory for the license classifications file of the `evaluate` action. It's the `--license-classifications-file` option for ORT.	no	—
reporters	List of reporters to run. Default: Excel,StaticHtml,WebApp	no	Excel,StaticHtml,WebApp
ort-extra-args	List of extra arguments for ORT, for all commands, set before the verb (before analyze, evaluate or report).	no	""
analyze-extra-args	List of extra arguments for the `analyze` action.	no	—
evaluate-extra-args	List of extra arguments for the `evaluate` action.	no	—
report-extra-args	List of extra arguments for the `report` action.	no	—

name	description
analyzer-result	output file for the analyze step
evaluation-result	output file for the evaluate step
results-dir	output directory for the report step