step-security/Gradle Dependency Submission
Calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub Personal Access Token (PAT). Defaults to PAT provided by Action runner | no | ${{ github.token }} |
| use-gradlew | Describes if the action will use `./gradlew` to retrieve the dependencies. Alternative `gradle` | yes | true |
| gradle-project-path | Path to the root of the project to extract dependencies for | yes | "" |
| gradle-build-module | The module for which to resolve dependencies. E.g. `:app` | yes | "" |
| gradle-build-configuration | The configuration used to retrieve all dependencies from. Java projects usually use `compileClasspath` | yes | "" |
| gradle-build-configuration-mapping | Optional module based configuration mapping. This is a multi line input whereas each line can contain mappings in the format of: `:module-name|configurationName` | no | — |
| gradle-dependency-path | Path to the file containing the dependency specification. Relative to the provided project-path. By default it will retrieve this via gradle. | no | — |
| sub-module-mode | Defines how the action handles submodules (sub projects). "IGNORE", "COMBINED", "INDIVIDUAL". Default: "IGNORE" | no | IGNORE |
| include-build-environment | Optional mode to also submit the `buildEnvironment` to the dependency submission API. This will execute the `buildEnvironment` task on the root module. | no | false |
| fail-on-error | Optional setting to enable an action failure in case any of the dependencies can not be parsed. Default: `false`. | no | false |
| correlator | Optional correlator string to submit to GitHub to identify the dependency submission. Defaults to generating based on gradle-build-module and gradle-build-configuration. | no | "" |
| legacy-support | Enables support for gradle versions below 7.5. Note: If enabled, all properties are read by the action as `--property` was only introduced in Gradle 7.5 or newer. | no | false |
Outputs
no outputs