gavanlamb/.Net Vulnerable

Check for vulnerable .NET packages

Trust Signals

name	description	required	default
add-pr-comment	A flag to indicate whether to add a comment to the associated PR with a report of the vulnerable packages. If this is enabled and the action is executed for a non-pull-request build then the comment will not be added.	no	—
pr-comment-name	A unique suffix for the pull-request comment for the current run.	no	—
add-check-run	A flag to indicate whether to add a check run, to the action, containing a report of the vulnerable packages.	no	—
fail-check-run-if-contains-vulnerable	A flag to indicate whether the check run should fail if there are any direct dependencies that are vulnerable. In order for this to work the check run needs to be enabled by setting `add-check-run` to be true.	no	—
check-run-name	A unique name for the check run tab.	no	—
include-transitive-dependencies	A flag to indicate whether to include transitive and top-level packages.	no	—
nuget-sources	The NuGet sources to use when searching for newer packages. To specify more than one use a comma separated value.	no	—
nuget-config-file-path	The path to the NuGet config file to use.	no	—
frameworks	The framework or frameworks to run the command for. To specify more than one use a comma separated value.	no	—
target	The project or solution file to target. If a file is not specified, the command will search the current directory for one.	no	—

no outputs