Vulnerability Spoiler Alert
Version updated for https://github.com/spaceraccoon/vulnerability-spoiler-alert-action to version v1.7.0.
- This action is used across all versions by 3 repositories.
Action Type
This is a Node action using Node version 20.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
This GitHub Action detects security vulnerabilities by monitoring open-source repositories and using AI to analyze commit messages, labels, and PR descriptions. It creates detailed issues with vulnerability analysis when a concrete exploit is demonstrated. The action supports multiple providers (Anthropic, OpenAI, DeepSeek) and can be configured to monitor specific repositories and create issues in different locations.
What’s Changed
What’s Changed
- build(deps): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/18
- build(deps-dev): bump vite from 8.0.13 to 8.0.16 by @dependabot[bot] in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/19
- Enable deepseek to utilize json_object instead of json_schema by @spaceraccoon in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/25
- chore: update vulnerable deps flagged by dependabot by @spaceraccoon in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/26
- Refactor judge model to support multiple providers by @spaceraccoon in https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/pull/27
Full Changelog: https://github.com/spaceraccoon/vulnerability-spoiler-alert-action/compare/v1.6.0...v1.7.0