satishobananamoto/Vigil Dependency Risk Scan
Scan your dependencies for health and security risks using vigil-risk
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| file | Path to dependency file (pyproject.toml, requirements.txt, etc.) | no | pyproject.toml |
| github-token | GitHub token for API access (increases rate limit from 60 to 5000/hr) | no | ${{ github.token }} |
| fail-on | Fail the check if any package has this risk level or above (critical, high, moderate, low, none) | no | critical |
| cascade | Include transitive dependency analysis | no | false |
Outputs
| name | description |
|---|---|
| report | Path to the generated markdown report |
| worst-risk | Worst risk level found (critical, high, moderate, low) |