actions-marketplace-validations/dependency-track-gh-action
Publishes BOMs to Dependency-Track and adds vulnerability info to PR comments
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| serverHostBaseUrl | Dependency-Track hostname | yes | — |
| apikey | Dependency-Track API key | yes | — |
| projectname | Project name in Dependency-Track | yes | — |
| projectversion | Project version in Dependency-Track | yes | — |
| autocreate | Automatically create the project in Dependency-Track if it doesn't exist | no | false |
| bomfilePath | Path with filename of the BOM | yes | — |
| timeoutInSecs | Path with filename of the BOM | yes | — |
| prNumber | Pull request number. Required for [on : pull_request]. | no | — |
| repository | The full name of the repository containing the issue or pull request | no | ${{ github.repository }} |
| token | GITHUB_TOKEN or a repo scoped PAT. | no | ${{ github.token }} |
| failOnSeverityLevel | Possible Values are one of CRITICAL, HIGH, MEDIUM, LOW | no | — |
Outputs
no outputs