hunted-labs/DepsDiver Dependency FOCI Scanner
Scan package manager files with the diver CLI and detect FOCI in your dependencies
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 2, 2026
- License
- MIT
Pinned Snippet
uses: hunted-labs/depsdiver-action@baac7503cb6e2adcd01ccf3a13e34a45cebebd9a # v3.0.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory path(s) to scan (default: repository root). Accepts a single path, or multiple paths separated by commas or newlines. | no | . |
| output-file | Output file name for the dependency FOCI report | no | deps-foci-report.txt |
| artifact-name | Name of the artifact to upload | no | deps-foci-report |
| artifact-retention-days | Number of days to retain the artifact | no | 30 |
| depsdiver-api-url | DepsDiver API base URL (e.g., https://depsdiver.com/api) | no | https://depsdiver.com/api |
| depsdiver-token | DepsDiver API token (should be set as secret) | yes | — |
| foci-threshold | FOCI change ratio threshold (0-100). Only packages whose change_ratio exceeds this percentage are included in the FOCI report section. Leave empty to include all packages with any FOCI data. | no | "" |
| diver-version | Version of the diver CLI to download | no | 0.3.1 |
Outputs
| name | description |
|---|---|
| report-file | Path to the generated report file |
| total-packages | Total number of dependencies found across all package manager files |
| foci-packages | Number of packages with FOCI detected |