pedrolacerda/scan-commit-for-vulnerable-dependencies
Scan a commit to check if it adds a vulnerability to the dependencies of a repo
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| GITHUB_TOKEN | GitHub Token for API authentication | yes | — |
Outputs
| name | description |
|---|---|
| severity | Severity of the vulnerability |
| patchedVersion | First patched version |
| vulnerableVersion | Vulnerable version range |