advanced-security/Maven Dependency Tree Dependency Submission
A GitHub Action for Maven project to submit a complete dependency tree to populate the GitHub Dependency Graph
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | The directory that contains the maven project | — | ${{ github.workspace }} |
| settings-file | Optional path to a Maven settings.xml file for the dependencies to be resolved | — | — |
| ignore-maven-wrapper | Flag for optionally ignoring any maven wrapper files (mvnw) and instead rely on the PATH provided mvn | — | false |
| maven-args | Additional maven arguments to add to the command line invocation of maven when it generates the dependency snapshot | — | "" |
| token | The GitHub token to use to submit the depedency snapshot to the repository | — | ${{ github.token }} |
| snapshot-sha | The SHA that the results will be linked to in the dependency snapshot | no | "" |
| snapshot-ref | The ref that the results will be linked to in the dependency snapshot | no | "" |
| detector-name | The name of the detector that generated the dependency snapshot | — | — |
| detector-version | The version of the detector that generated the dependency snapshot | — | — |
| detector-url | The URL to the detector that generated the dependency snapshot | — | — |
| correlator | An optional identifier to distinguish between multiple dependency snapshots of the same type | no | "" |
Outputs
no outputs