datanerd/Report updated dependencies
Adds a new comment to PR with a summary of changes to dependencies in a PR including release notes and changelogs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| token | Personal access token (PAT) used to fetch the repository. The PAT is configured with the local git config, which enables your scripts to run authenticated git commands. The post-job step removes the PAT. We recommend using a service account with the least permissions necessary. Also when generating a new PAT, select the least scopes necessary. [Learn more about creating and using encrypted secrets](https://help.github.com/en/actions/automating-your-workflow-with-github-actions/creating-and-using-encrypted-secrets) | yes | ${{ github.token }} |
| path | Relative path under $GITHUB_WORKSPACE to place the repository | — | — |
| changelogs | Controls whether to fetch release notes from updated dependencies. Fetching dependencies can be quite slow on larger changesets | — | true |
Outputs
no outputs