Skip to content

A Github Action to parse DependencyCheck JSON reports, print the found vulnerabilities and fail the build.

License

Notifications You must be signed in to change notification settings

albuch/sbt-dependency-check-action

Use this GitHub action with your project
Add this Action to an existing workflow or create a new one
View on Marketplace

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

sbt-dependency-check-action

A Github Action to parse DependencyCheck JSON reports, print the found vulnerabilities and fail the build if a vulnerability was found.

Usage

The Action takes one configuration parameter:

jsonReportPath

The path to the JSON report file of DependencyCheck. For SBT projects using the default configuration of sbt-dependency-check the path is target/scala-<version>/sbt-1.0/dependency-check-report.json.

Example

jobs:
  test:
    steps:
      - name: DependencyCheck
        run: sbt -v -Dfile.encoding=UTF-8 dependencyCheck
      - name: Print DependencyCheck Result
        uses: albuch/sbt-dependency-check-action@v1.0
        with:
          jsonReportPath: "target/scala-2.12/sbt-1.0/dependency-check-report.json"