actions-marketplace-validations/check-cve
Send GitHub vulnerability alerts to multiple platforms.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 1, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/kunalnagarco_action-cve@951daa5312fad22cd6e80a48440b5899704a82b9 # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Personal Access Token | — | — |
| org | Org name to support Org level alerts: https://docs.github.com/en/rest/dependabot/alerts?apiVersion=2022-11-28#list-dependabot-alerts-for-an-organization | — | — |
| enterprise | Enterprise name to support Enterprise level alerts: https://docs.github.com/en/rest/dependabot/alerts?apiVersion=2022-11-28#list-dependabot-alerts-for-an-enterprise | — | — |
| microsoft_teams_webhook | Microsoft Teams Channel Webhook URL. More info: https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/add-incoming-webhook | — | — |
| slack_webhook | Slack Webhook URL. More info: https://api.slack.com/messaging/webhooks | — | — |
| pager_duty_integration_key | Pager Duty Integration Key. More info: https://support.pagerduty.com/docs/services-and-integrations | — | — |
| zenduty_integration_key | Zenduty Integration Key (preferred). Create a Generic Integration in your Zenduty service to get this key: https://docs.zenduty.com/docs/integrations/integrations | — | — |
| zenduty_api_key | Zenduty API Key (deprecated, use zenduty_integration_key instead). Create one by visiting Account Settings > API Keys | — | — |
| zenduty_service_id | Zenduty Service ID (only required when using zenduty_api_key): https://docs.zenduty.com/docs/services | — | — |
| zenduty_escalation_policy_id | Zenduty Escalation Policy ID (only required when using zenduty_api_key): https://docs.zenduty.com/docs/escalationpolicies | — | — |
| email_from | Sender email | — | — |
| email_list | Comma-separated list of emails sent as bcc | — | — |
| email_subject | Custom subject line for email filtering | — | — |
| email_transport_ses_region | AWS SES region e.g. us-east-1 | — | — |
| email_transport_ses_access_key_id | AWS SES Access Key ID | — | — |
| email_transport_ses_secret_access_key | AWS SES Secret Access Key | — | — |
| email_transport_smtp_host | SMTP host e.g. smtp.gmail.com | — | smtp.gmail.com |
| email_transport_smtp_port | SMTP port | — | 587 |
| email_transport_smtp_user | SMTP user | — | — |
| email_transport_smtp_password | SMTP password | — | — |
| count | Number of vulnerability alerts to send | — | 20 |
| severity | Comma separated list of severities. E.g. low,medium,high,critical (NO SPACES BETWEEN COMMA AND SEVERITY) | — | — |
| ecosystem | A comma-separated list of ecosystems. If specified, only alerts for these ecosystems will be returned. | — | — |
| ignore | Comma-separated list of package names to ignore. E.g. lodash,axios (NO SPACES BETWEEN COMMA AND PACKAGE NAME) | — | — |
Outputs
no outputs