mario-fribla-gonzalez/Node Dependency Check
Scan project dependencies for vulnerabilities using dependency-check
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 23, 2026
- License
- None
Pinned Snippet
uses: mario-fribla-gonzalez/reuse-dependency-check@25d9250e1293579b7fd894df3ba43ed9edd2317a # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| project | Project name | no | ${{ github.event.repository.name }} |
| path | Path to scan | no | . |
| args | Extra arguments for dependency-check | no | --disableCentral --failOnCVSS 7 --enableRetired --noupdate --disableNodeAudit --nodeAuditSkipDevDependencies --disableOssIndex |
| version | Dependency-Check version to use | no | 12.1.0 |
| format | Report format(s), comma separated (e.g. HTML, XML, JSON) | no | XML,JSON,HTML |
| out | Output directory for reports | no | reports |
| workdir | Working directory to run the scan from | no | . |
Outputs
no outputs