Deptools Scan
Version updated for https://github.com/deptools-io/scan-action to version v1.0.0.
- This action is used across all versions by ? repositories.
Action Type
This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
The Deptools Scan Action is a GitHub Action designed to automate dependency scanning within CI pipelines by integrating with the Deptools platform. It identifies vulnerabilities, license issues, and outdated dependencies in a project’s dependencies and optionally enforces quality gates to fail workflows if thresholds (e.g., critical vulnerabilities, low dependency health scores) are not met. This action streamlines security and compliance checks, ensuring projects maintain high dependency standards and reducing manual effort in dependency management.
What’s Changed
Trigger a Deptools dependency scan from your CI pipeline. Can block your build if vulnerabilities, license risks, or outdated dependencies don’t meet your quality thresholds.