{"id":16118909,"url":"https://github.com/carlspring/mend-actions","last_synced_at":"2026-03-07T19:33:20.364Z","repository":{"id":248890160,"uuid":"821454800","full_name":"carlspring/mend-actions","owner":"carlspring","description":null,"archived":false,"fork":false,"pushed_at":"2025-04-01T03:11:31.000Z","size":44,"stargazers_count":1,"open_issues_count":1,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-07-05T23:38:54.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/carlspring.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-06-28T15:18:56.000Z","updated_at":"2025-04-01T03:10:43.000Z","dependencies_parsed_at":"2024-10-09T20:51:31.058Z","dependency_job_id":"9e01394c-2695-4758-bc87-17fc883c3d93","html_url":"https://github.com/carlspring/mend-actions","commit_stats":null,"previous_names":["carlspring/mend-actions"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/carlspring/mend-actions","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carlspring%2Fmend-actions","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carlspring%2Fmend-actions/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carlspring%2Fmend-actions/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carlspring%2Fmend-actions/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/carlspring","download_url":"https://codeload.github.com/carlspring/mend-actions/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carlspring%2Fmend-actions/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30227853,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T19:01:10.287Z","status":"ssl_error","status_checked_at":"2026-03-07T18:59:58.103Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-09T20:51:21.271Z","updated_at":"2026-03-07T19:33:20.333Z","avatar_url":"https://github.com/carlspring.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"This is a set of Github Actions for the Mend.io CLI.\n\n# List of Actions\n\n## The `setup` Action\n\nThis Github Action is responsible for downloading and installing the Mend.io CLI.\n\nPlease note:\n* This action is required to be run before any other Mend.io CLI actions.\n* The version of the Mend.io CLI to be installed will be the latest available version from Mend.io, as the vendor\n  does not provide a versioned download link, nor do they provide historical versions.\n\n## The `login` Action\n\nThis Github Action is responsible for logging in to the Mend.io website.\n\nThis action requires the following environment variables to be set in the invoking Github workflow in order to\nbe able to authenticate securely without storing the credentials on the file system:\n\n```yaml\nenv:\n  MEND_URL: ${{ secrets.MEND_URL }}\n  MEND_ORGANIZATION: ${{ secrets.MEND_ORGANIZATION }}\n  MEND_ORGANIZATION_KEY: ${{ secrets.MEND_ORGANIZATION_KEY }}\n  MEND_USER_KEY: ${{ secrets.MEND_USER_KEY }}\n  MEND_EMAIL: ${{ secrets.MEND_EMAIL }}\n```\n\nNeedless to say, the above secrets must also be defined as GitHub secrets in the repository settings.\n\n## The `scan-dependencies` Action\n\nThis Github Action is responsible for carrying out a dependency scan and producing a report.\n\nThe following options are available:\n\n| Input Parameter      | Description                                    | Default Value         | Required |\n|----------------------|------------------------------------------------|-----------------------|----------|\n| `json_filename`      | The JSON output filename for the scan results  | `dependencies.json`   | false    |\n| `sarif_filename`     | The SARIF output filename for the scan results | `results.sarif`       | false    |\n| `scope`              | The scope for the scan results                 | n/a                   | true     |\n| `github_url`         | The URL for the GitHub repository              | `https://github.com`  | true     |\n| `github_repository`  | The name of the GitHub repository              | n/a                   | false    |\n| `publish_to_mend`    | Whether to publish the scan results to Mend.io | `true`                | true     |\n| `workflow_run`       | The ID of the workflow run                     | n/a                   | true     |\n\n## The `scan-docker` Action\n\nThis Github Action is responsible for carrying out a Docker image scan and producing a report.\n\nThe following options are available:\n\n| Input Parameter      | Description                                          | Default Value      | Required |\n|----------------------|------------------------------------------------------|--------------------|----------|\n| `docker-image`       | The Docker image to scan                             | n/a                | true     |\n| `exclude-licensing`  | Exclude licensing information from the scan results  | `false`            | false    |\n| `format`             | The format for the scan results                      | `sarif`            | false    |\n| `filename`           | The filename for the scan results                    | `results.sarif`    | false    |\n| `scope`              | The scope for the scan results                       | n/a                | true     |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcarlspring%2Fmend-actions","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcarlspring%2Fmend-actions","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcarlspring%2Fmend-actions/lists"}