tonycknight/pkgchk
An Action for .Net package dependency checks & PRs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project-path | The relative path to the solution or project | yes | — |
| scan-issues | Scan for vulnerable, transitive or deprecated packages | no | true |
| scan-upgrades | Scan for package upgrades | no | false |
| list-dependencies | List dependencies | no | false |
| deprecated | Scan for deprecated packages | no | false |
| vulnerable | Scan for vulnerable packages | no | true |
| transitives | Include transitive packages in scans | no | true |
| trace | Output trace to logs | no | false |
| github-token | GitHub token | yes | ${{ github.token }} |
| repo | The repository name, as owner/repo | no | ${{ github.repository }} |
| github-title | The vulnerability report title | no | Package vulnerabilities |
| github-upgrade-title | The upgrades report title | no | Package upgrades |
| github-dependencies-title | The dependency report title | no | Project dependencies |
| prid | The GitHub pull request ID | no | ${{ github.event.number }} |
| commit-hash | The GitHub commit hash | no | ${{ github.sha }} |
| fail-on-critical | fail on Critical severity vulnerabilities and packages deprecated for Critical Bugs reasons | yes | true |
| fail-on-high | fail on High severity vulnerabilities | yes | true |
| fail-on-moderate | fail on Moderate severity vulnerabilities | yes | false |
| fail-on-legacy | fail on packages deprecated for Legacy reasons, such as package deprecation. | yes | false |
| fail-on-upgrades | fail on any outstanding package upgrades. | yes | false |
| pass-img | URI of an image for successful scans | no | "" |
| fail-img | URI of an image for failed scans | no | "" |
| restore-solution | Restore solution | no | true |
| restore-tools | Restore tools | no | true |
| config | Path to configuration file | no | "" |
Outputs
no outputs