appthreat/owasp-dep-scan
dep-scan is a fully open-source security audit tool for project dependencies based on known vulnerabilities and advisories.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Feb 1, 2024
- License
- MIT
Pinned Snippet
uses: appthreat/dep-scan-action@001ee303afb65146cc687e4cb89d55b13c6b081f # v4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| src | Source directory to scan. Defaults to workspace | no | /github/workspace |
| report_file | Output file for the generated report. Defaults to reports/depscan.json | no | /github/workspace/reports/depscan.json |
| profile | Name of the profile to use (appsec, research, operational, threat-modeling, license-compliance, generic) | no | generic |
| thank_you | Indicate you have sponsored OWASP dep-scan | no | I have not sponsored OWASP-dep-scan. |
Outputs
no outputs