search

actions / dependency-review-action

A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs
MIT License
585 stars 99 forks source link

Improve Snapshots Experience #567

Open febuiles opened 11 months ago

febuiles commented 11 months ago

With the release of support for Dependency Snapshots we've added a couple of options and features that are not well explained on our documentation. Our user experience could also be improved (people who don't use snapshots should not be seeing snapshots-related messages, see https://github.com/actions/dependency-review-action/issues/566). We should:

  1. Improve the documentation for snapshots: Explain what snapshots are, when they're helpful and how to use them inside the Action
  2. Improve status/error messaging: Users who are not submitting snapshots to their repository should not see any snapshots-related messages or errors.

Tasks

jovel commented 9 months ago

Moved this to the Dependency Graph Icebox as work to review on when it can be prioritized