nhs-england-tools/Dependabot Policy Enforcer
Validates Dependabot policy compliance
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Operation mode for the enforcer. Can be 'enforce' to block non-compliant PRs or 'report' to only log results. Set this as an organisation or repository variable (vars.DEPENDABOT_ENFORCER_MODE). | no | enforce |
| blocking-severity | Minimum severity level that will block the pipeline in enforce mode. Alerts at this level and above count as blocking violations; alerts below this level are reported in the PR comment but do not cause a failure. Accepted values: critical, high, medium, low. | no | critical |
| github-token | GitHub token used to fetch Dependabot alerts and post a policy summary comment on the pull request. Use the built-in secrets.GITHUB_TOKEN. | yes | — |
Outputs
no outputs