pollychrome/Canary Dependency Scan
Parse lockfiles (npm, PyPI, Go, Maven, RubyGems, NuGet, Cargo, Composer) and submit dependency inventory to Canary Worker
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| worker_url | Canary Worker URL (e.g., https://canary.your-domain.workers.dev) | yes | — |
| auth_token | Authentication token for Canary Worker API | yes | — |
| project_id | Project identifier for grouping scans | yes | — |
| include_dev | Include development dependencies in scan | no | true |
| working_directory | Directory to scan for lockfiles (defaults to repository root) | no | . |
| fail_on_error | Fail the job if submission to Worker fails | no | true |
Outputs
| name | description |
|---|---|
| packages_count | Number of packages discovered |
| status | Submission status (success/failed/partial) |
| lockfiles_found | List of lockfiles discovered |