{"id":20434481,"url":"https://github.com/debricked/actions","last_synced_at":"2025-03-05T06:25:59.051Z","repository":{"id":65159487,"uuid":"267593406","full_name":"debricked/actions","owner":"debricked","description":"Github Actions for integrating with Debricked","archived":false,"fork":false,"pushed_at":"2024-06-18T13:35:55.000Z","size":37,"stargazers_count":12,"open_issues_count":0,"forks_count":2,"subscribers_count":5,"default_branch":"master","last_synced_at":"2024-10-29T23:12:40.372Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/debricked.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-05-28T13:11:06.000Z","updated_at":"2024-06-18T13:34:38.000Z","dependencies_parsed_at":"2023-11-30T09:26:40.190Z","dependency_job_id":"b895a912-403b-4d4c-9b3d-88ee7df0fa14","html_url":"https://github.com/debricked/actions","commit_stats":{"total_commits":5,"total_committers":4,"mean_commits":1.25,"dds":0.6,"last_synced_commit":"dc03ccf15e407f106b44b407281d96c0c4335e56"},"previous_names":[],"tags_count":14,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Factions","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Factions/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Factions/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/debricked%2Factions/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/debricked","download_url":"https://codeload.github.com/debricked/actions/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241977121,"owners_count":20051773,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-15T08:27:10.542Z","updated_at":"2025-03-05T06:25:59.031Z","avatar_url":"https://github.com/debricked.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# GitHub Actions for Debricked\n\nThis repository contains the source code for our GitHub Actions.\n\nRemember that we also provide a GitHub integration as a [GitHub App](https://github.com/apps/debricked/), which is used to create automatic [Pull Requests with root fixes](https://portal.debricked.com/vulnerability-management-43/debricked-s-pull-requests-201).\n\nYou can always find documentation for our different ways of integrating with Debricked at our [Debricked documentation](https://debricked.com/docs/integrations/ci-build-systems/github.html#github-actions).\n\n## Usage\n\n### Scan\n\nYou can use the action `debricked/actions@v3` to scan your repository.\nThe action needs one environmental variable: `DEBRICKED_TOKEN`, to be set to your Debricked API token.\nYou should store it in a secret variable under `Settings - Secrets` in your repository, so it doesn't leak through the logs!\n\nThis is an example workflow file which uses our Docker image:\n\n```yaml\nname: Vulnerability scan\n\non: [push]\n\njobs:\n  vulnerabilities-scan:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v3\n      - uses: debricked/actions@v3\n        env:\n          DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN }}\n```\n\nBut it is also possible to run it standalone, making it possible for you to customise the runtime environment:\n\n```yaml\nname: Vulnerability scan\n\non: [push]\n\njobs:\n  vulnerabilities-scan:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v3\n      - uses: debricked/actions/cache@v3\n      - uses: debricked/actions/scan-non-docker@v3\n        env:\n          DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN }}\n```\n\nWhen scanning, the High Performance resolution is enabled by default but can be disabled using the `--no-resolve` flag\n\n`scan` command also supports a number of different flags which will help you to adjust scan behavior to your needs. You can find out more about them on [Debricked Portal](https://portal.debricked.com/debricked-cli-63/debricked-cli-documentation-298?postid=472#scan)\n\n### Resolve\n\nThis command analyses your project to find eligible manifest files, that do not have related lock files, and uses them to generate the appropriate Debricked lock files.\n\nExample workflow using our Docker image:\n\n```yaml\nname: Debricked resolve\n\non: [push]\n\njobs:\n  resolve:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v3\n      - uses: debricked/actions/resolve@v3\n        env:\n          DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN }}\n```\n\nExample workflow without Docker:\n\n```yaml\nname: Debricked resolve\n\non: [push]\n\njobs:\n  resolve:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v3\n      - uses: debricked/actions/cache@v3\n      - uses: debricked/actions/resolve-non-docker@v3\n        env:\n          DEBRICKED_TOKEN: ${{ secrets.DEBRICKED_TOKEN }}\n```\n\nYou can read more about `resolve` command on [High Performance Scan: faster, more accurate, and more secure dependency scanning](https://portal.debricked.com/debricked-cli-63/high-performance-scan-faster-more-accurate-and-more-secure-dependency-scanning-293) page\n\nAnd you can find out more about flags supported by `resolve` command on [Debricked Portal](https://portal.debricked.com/debricked-cli-63/debricked-cli-documentation-298?postid=472#resolve) ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdebricked%2Factions","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdebricked%2Factions","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdebricked%2Factions/lists"}