theztefan/UV Dependency Submission
Parses uv.lock files in the checked-out repository and submits a dependency snapshot to the GitHub Dependency Graph API for a specified target repository. Supports cross-repo orchestration where a central workflow submits snapshots on behalf of other repositories.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-repo | Full name of the target repository (owner/repo) | yes | — |
| target-sha | The commit SHA to associate the snapshot with | yes | — |
| target-ref | The git ref to associate the snapshot with (e.g. refs/heads/main) | yes | — |
| token | GitHub token with contents:write permission on the target repository | yes | — |
| detector-name | Name of the detector to report in the snapshot | no | uv-dependency-submission |
| detector-version | Version of the detector to report in the snapshot | no | 1.0.0 |
| correlator | Correlator string for the dependency snapshot job | no | uv-dependency-orchestrator |
Outputs
no outputs