greenbone / gsad

Greenbone Security Assistant HTTP Server - The server talking to the Greenbone Vulnerability Management daemon (gvmd).
GNU Affero General Public License v3.0
11 stars 14 forks source link

Added action dependency review #127

Closed ghost closed 1 year ago

ghost commented 1 year ago

What

This action scans your pull requests for dependency changes, and will raise an error if any vulnerabilities or invalid licenses are being introduced.

Why

This is a part of the GitHub Advanced Security feature to improve our Security posture in GB AG repositories.

References

Related to Jira DEVOPS-624 More info dependency-review-action

Checklist