depdiff/examples/github-action.yml at main · Dtdkvn/depdiff · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: Dependency update audit

on:
  workflow_dispatch:
    inputs:
      before:
        description: Previous package version (for example chalk@5.3.0)
        required: true
      after:
        description: Candidate package version (for example chalk@5.4.0)
        required: true

permissions:
  contents: read
  security-events: write

jobs:
  depdiff:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      - name: Audit npm update
        id: depdiff
        uses: Dtdkvn/depdiff@4a37a516d9f8d4d147457ec561d126618ffc6906 # available after the first reviewed Action release; reviewed full SHA
        with:
          before: ${{ inputs.before }}
          after: ${{ inputs.after }}
          policy: .depdiff.yml
      - uses: github/codeql-action/upload-sarif@9e3211c9a3b9311dfe05da2ed48eea3386f042dd # v4.37.6
        if: always()
        with:
          sarif_file: depdiff-results.sarif
      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        if: always()
        with:
          name: depdiff-report
          path: depdiff-report.html