Skip to content

Commit

Permalink
Merge pull request #181 from tspascoal/add-summary
Browse files Browse the repository at this point in the history
Show vulnerabities and license information on the job summary.
  • Loading branch information
Federico Builes authored Aug 18, 2022
2 parents 9f2f2d8 + 0e0d6ec commit a8e7c37
Show file tree
Hide file tree
Showing 5 changed files with 15,369 additions and 15,043 deletions.
16 changes: 6 additions & 10 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,14 @@ raise an error if any vulnerabilities or invalid licenses are being introduced.

The action is available for all public repositories, as well as private repositories that have GitHub Advanced Security licensed.

You can see the results on the job logs

<img width="854" alt="Screen Shot 2022-03-31 at 1 10 51 PM" src="https://user-images.githubusercontent.com/2161/161042286-b22d7dd3-13cb-458d-8744-ce70ed9bf562.png">

or on the job summary

<img src="https://user-images.githubusercontent.com/7847935/182871416-50332bbb-b279-4621-a136-ca72a4314301.png">

## Installation

**Please keep in mind that you need a [GitHub Advanced Security](https://docs.github.com/en/enterprise-cloud@latest/get-started/learning-about-github/about-github-advanced-security) license if you're running this action on private repositories.**
Expand Down Expand Up @@ -144,15 +150,6 @@ to filter. A couple of examples:

**Important**

<<<<<<< HEAD
- The action will only accept one of the two parameters; an error will
be raised if you provide both.
- By default both parameters are empty (no license checking is
performed).
- We don't have license information for all of your dependents. If we
can't detect the license for a dependency **we will inform you, but the
action won't fail**.
=======
* Checking for licenses is not supported on GHES.
* The action will only accept one of the two parameters; an error will
be raised if you provide both.
Expand All @@ -161,7 +158,6 @@ performed).
* We don't have license information for all of your dependents. If we
can't detect the license for a dependency **we will inform you, but the
action won't fail**.
>>>>>>> main

## Blocking pull requests

Expand Down
Loading

0 comments on commit a8e7c37

Please sign in to comment.