karanshah229/Dependabot Vulnerability SLA Check
Check Dependabot alerts against SLA thresholds and send Slack notifications
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Personal Access Token with "Dependabot alerts: Read" permission | yes | — |
| slack-webhook-url | Slack webhook URL for notifications | yes | — |
| sla-config | JSON array of SLA configuration. Format: [{"severity": "critical", "duration": 30}, ...] | no | [{"severity": "critical", "duration": 30}, {"severity": "high", "duration": 60}, {"severity": "moderate", "duration": 90}, {"severity": "low", "duration": 180}] |
| send-success-notification | Whether to send success notifications when no alerts require attention | no | false |
Outputs
| name | description |
|---|---|
| alerts-checked | Number of alerts checked |
| alerts-notified | Number of alerts that triggered notifications |
| sla-breached | Number of alerts that breached SLA |