|
1 | | -# python-actions-template |
2 | | -Python Based Actions Template |
| 1 | +# cocoapods-dependency-submission-action |
| 2 | + |
| 3 | +This is the [CocoaPods Dependency Submission Action](https://github.com/GeekMasher/cocoapods-dependency-submission-action) which parses CocoaPods Lock files and submits the dependencies to the [Dependency Graph Submission API](https://docs.github.com/en/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api). |
| 4 | + |
| 5 | +This means thats [GitHub's Dependabot](https://docs.github.com/en/enterprise-cloud@latest/code-security/dependabot/dependabot-alerts/about-dependabot-alerts) can use the CocoaPods to check for security vulnerabilities in your dependencies and keeping your Software Bill of Materials up to date. |
| 6 | + |
| 7 | +## Usage |
| 8 | + |
| 9 | +```yaml |
| 10 | +- name: CocoaPods Dependency Submission Action |
| 11 | + uses: GeekMasher/[email protected] |
| 12 | +``` |
| 13 | +
|
| 14 | +### Action Inputs |
| 15 | +
|
| 16 | +```yaml |
| 17 | +- name: CocoaPods Dependency Submission Action |
| 18 | + uses: GeekMasher/[email protected] |
| 19 | + with: |
| 20 | + # [optonal] The path to the Podfile.lock file. Defaults to finding all |
| 21 | + # Podfile.lock in the current working directory |
| 22 | + cocoapods-lock: "./Podfile.lock" |
| 23 | + # [optional] Token used to authenticate with the GitHub API. Defaults to the GITHUB_TOKEN secret. |
| 24 | + token: ${{ secrets.ACTIONS_TOKEN }} |
| 25 | +``` |
| 26 | +
|
| 27 | +### Workflow Example |
| 28 | +
|
| 29 | +```yaml |
| 30 | +name: Brew Lockfile Dependency Submission Action |
| 31 | +on: |
| 32 | + push: |
| 33 | + branches: [ main ] |
| 34 | + pull_request: |
| 35 | + branches: [ main ] |
| 36 | + |
| 37 | +permissions: |
| 38 | + contents: write # needed |
| 39 | + |
| 40 | +jobs: |
| 41 | + gradle-lock: |
| 42 | + runs-on: ubuntu-latest |
| 43 | + steps: |
| 44 | + - uses: actions/checkout@v2 |
| 45 | + |
| 46 | + # ... generate CocoaPods Podfile.lock |
| 47 | + |
| 48 | + - name: CocoaPods Dependency Submission Action |
| 49 | + uses: GeekMasher/[email protected] |
| 50 | +``` |
| 51 | +
|
| 52 | +## License |
| 53 | +
|
| 54 | +This project is licensed under the terms of the MIT open source license. Please refer to [MIT](./LICENSE) for the full terms. |
| 55 | +
|
| 56 | +## Maintainers |
| 57 | +
|
| 58 | +Maintained by [@GeekMasher](https://github.com/GeekMasher). |
| 59 | +
|
| 60 | +## Support |
| 61 | +
|
| 62 | +Please [create GitHub issues](https://github.com/GeekMasher/cocoapods-dependency-submission-action) for any feature requests, bugs, or documentation problems. |
| 63 | +
|
| 64 | +## Acknowledgement |
| 65 | +
|
| 66 | +- @GeekMasher: Author and Maintainer |
0 commit comments