You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -61,13 +61,13 @@ The following configuration options are available.
|`fail_on_severity`| Optional | Defines the threshold for level of severity (`low`, `moderate`, `high`, `critical`).</br>The action will fail on any pull requests that introduce vulnerabilities of the specified severity level or higher. |
65
-
|`allow_licenses`| Optional | Contains a list of allowed licenses. You can find the possible values for this parameter in the [Licenses](/rest/licenses) page of the API documentation.</br>The action will fail on pull requests that introduce dependencies with licenses that do not match the list.|
66
-
|`deny_licenses`| Optional | Contains a list of prohibited licenses. You can find the possible values for this parameter in the [Licenses](/rest/licenses) page of the API documentation.</br>The action will fail on pull requests that introduce dependencies with licenses that match the list.|
64
+
|`fail-on-severity`| Optional | Defines the threshold for level of severity (`low`, `moderate`, `high`, `critical`).</br>The action will fail on any pull requests that introduce vulnerabilities of the specified severity level or higher. |
65
+
|`allow-licenses`| Optional | Contains a list of allowed licenses. You can find the possible values for this parameter in the [Licenses](/rest/licenses) page of the API documentation.</br>The action will fail on pull requests that introduce dependencies with licenses that do not match the list.|
66
+
|`deny-licenses`| Optional | Contains a list of prohibited licenses. You can find the possible values for this parameter in the [Licenses](/rest/licenses) page of the API documentation.</br>The action will fail on pull requests that introduce dependencies with licenses that match the list.|
67
67
68
68
{% tip %}
69
69
70
-
**Tip:** The `allow_licenses` and `deny_licenses` options are mutually exclusive.
70
+
**Tip:** The `allow-licenses` and `deny-licenses` options are mutually exclusive.
71
71
72
72
{% endtip %}
73
73
@@ -90,15 +90,15 @@ jobs:
90
90
uses: actions/dependency-review-action@v2
91
91
with:
92
92
# Possible values: "critical", "high", "moderate", "low"
93
-
fail_on_severity: critical
94
-
# You can only can only include one of these two options: `allow_licenses` and `deny-licences`
93
+
fail-on-severity: critical
94
+
# You can only can only include one of these two options: `allow-licenses` and `deny-licences`
95
95
# ([String]). Only allow these licenses (optional)
96
96
# Possible values: Any `spdx_id` value(s) from https://docs.github.com/en/rest/licenses
97
-
# allow_licenses: GPL-3.0, BSD-3-Clause, MIT
97
+
# allow-licenses: GPL-3.0, BSD-3-Clause, MIT
98
98
99
99
# ([String]). Block the pull request on these licenses (optional)
100
100
# Possible values: Any `spdx_id` value(s) from https://docs.github.com/en/rest/licenses
101
-
# deny_licenses: LGPL-2.0, BSD-2-Clause
101
+
# deny-licenses: LGPL-2.0, BSD-2-Clause
102
102
```
103
103
104
104
For further details about the configuration options, see [`dependency-review-action`](https://github.com/actions/dependency-review-action#readme).
0 commit comments