postmortem supply-chain gate

Version updated for https://github.com/mlab-sh/postmortem to version v2.1.0.

  • This action is used across all versions by 1 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The postmortem action performs offline static analysis of dependencies across multiple ecosystems (npm, pip, poetry, Cargo, Go, Java, and NuGet) to detect potential security vulnerabilities and malicious code. It can also audit the system’s installed packages and provide reputation intelligence on dependencies. The action is designed to be offline by default and can be configured to run online for additional details such as known vulnerabilities.

What’s Changed

Full Changelog: https://github.com/mlab-sh/postmortem/compare/v2...v2.1.0