advanced-security/brew-dependency-submission-actionPublic

generated fromGeekMasher/python-actions-template

NotificationsYou must be signed in to change notification settings
Fork4
Star3

Brew Lockfile Dependency Submission Action

License

MIT license

3 stars 4 forks Branches Tags Activity

Star

Notifications

You must be signed in to change notification settings

Use this GitHub action with your project

Add this Action to an existing workflow or create a new one

View on Marketplace

Branches Tags

Folders and files

Name		Name	Last commit message	Last commit date
Latest commit History 136 Commits
.github		.github
.vscode		.vscode
bldsa		bldsa
examples		examples
tests		tests
vendor		vendor
.gitignore		.gitignore
.release.yml		.release.yml
.vimignore		.vimignore
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
LICENSE		LICENSE
Pipfile		Pipfile
Pipfile.lock		Pipfile.lock
README.md		README.md
SECURITY.md		SECURITY.md
SUPPORT.md		SUPPORT.md
action.yml		action.yml

Repository files navigation

brew-dependency-submission-action

Overview

This is theBrew / Homebrew Dependency Submission Action which parses Homebrew files and submits the dependencies to theDependency Graph Submission API.

This means thatsGitHub's Dependabot can use the Homebrew to check for security vulnerabilities in your dependencies and keeping your Software Bill of Materials up to date.

Usage

-name:Brew Lockfile Dependency Submission Actionuses:advanced-security/brew-dependency-submission-action@v1.1.0

Action Inputs

-name:Brew Lockfile Dependency Submission Actionuses:advanced-security/brew-dependency-submission-action@v1.1.0with:# [optonal] The path to the Brewfile.lock.json file. Defaults to finding all Brewfile.lock.json in the current# working directorybrew-lock:"./Brewfile.lock.json"# [optional] Token used to authenticate with the GitHub API. Defaults to the GITHUB_TOKEN secret.token:${{ secrets.ACTIONS_TOKEN }}

Workflow Example

name:Brew Lockfile Dependency Submission Actionon:push:branches:[main]pull_request:branches:[main]permissions:contents:write# neededjobs:gradle-lock:runs-on:ubuntu-lateststeps:      -uses:actions/checkout@v2# ... generate Brew lockfile      -name:Brew Lockfile Dependency Submission Actionuses:advanced-security/brew-dependency-submission-action@v1.1.0