taskworld/Audit action
Audits dependencies for vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| package-name | name of the service or package | — | — |
| failure-level | Severity level causing audit to fail | — | low |
| package-manager | Package manager (pnpm or yarn) | — | pnpm |
| path | Target path for the audit | — | — |
| include-dev-deps | Include devDependencies in the audit | — | false |
| detailed-report | Include a 3rd column listing affected packages per severity | — | false |
Outputs
| name | description |
|---|---|
| vulnerabilities | Rendered vulnerability report (markdown) |
| failed | Set to true when vulnerabilities exceed failure-level |