postmortem supply-chain gate

Version updated for https://github.com/mlab-sh/postmortem to version v2.3.0.

  • This action is used across all versions by 2 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

postmortem is a fast, static analysis tool designed to detect potential supply-chain attacks by examining dependencies across various package managers. It provides reputation intelligence, vulnerability checks, and audit capabilities to ensure the integrity of your software supply chain. The action runs network requests only when necessary, ensuring minimal overhead and privacy.

What’s Changed

Full Changelog: https://github.com/mlab-sh/postmortem/compare/v2.2.0...v2.3.0