{"id":46065750,"url":"https://github.com/int128/dependabot-alerts-action","last_synced_at":"2026-06-13T03:10:58.483Z","repository":{"id":341363912,"uuid":"1169852370","full_name":"int128/dependabot-alerts-action","owner":"int128","description":"Action to list the Dependabot Alerts","archived":false,"fork":false,"pushed_at":"2026-06-06T17:07:06.000Z","size":3793,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-06T19:06:34.483Z","etag":null,"topics":["dependabot","github-actions","security","typescript"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/int128.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-03-01T10:19:19.000Z","updated_at":"2026-06-06T17:06:39.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/int128/dependabot-alerts-action","commit_stats":null,"previous_names":["int128/dependabot-alerts-action"],"tags_count":17,"template":false,"template_full_name":"int128/typescript-action-with-graphql-codegen","purl":"pkg:github/int128/dependabot-alerts-action","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/int128%2Fdependabot-alerts-action","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/int128%2Fdependabot-alerts-action/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/int128%2Fdependabot-alerts-action/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/int128%2Fdependabot-alerts-action/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/int128","download_url":"https://codeload.github.com/int128/dependabot-alerts-action/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/int128%2Fdependabot-alerts-action/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34270483,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-13T02:00:06.617Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dependabot","github-actions","security","typescript"],"created_at":"2026-03-01T12:13:22.634Z","updated_at":"2026-06-13T03:10:58.478Z","avatar_url":"https://github.com/int128.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# dependabot-alerts-action [![ts](https://github.com/int128/dependabot-alerts-action/actions/workflows/ts.yaml/badge.svg)](https://github.com/int128/dependabot-alerts-action/actions/workflows/ts.yaml)\n\nThis is an action to list the Dependabot alerts for a repository.\n\n## Getting Started\n\nHere is an example workflow to use this action:\n\n```yaml\njobs:\n  notify:\n    runs-on: ubuntu-slim\n    permissions:\n      vulnerability-alerts: read\n    steps:\n      - id: dependabot-alerts\n        uses: int128/dependabot-alerts-action@v0\n        with:\n          path: \"**/*\"\n          package-ecosystem: \"*\"\n```\n\nYou can specify the `path` input to filter the dependency files to check for alerts.\nIt supports multiple patterns separated by newlines.\n\n```yaml\n- uses: int128/dependabot-alerts-action@v0\n  with:\n    path: |\n      frontend/package-lock.json\n      backend/pom.xml\n```\n\nIt also supports negation patterns to exclude certain files.\n\n```yaml\n- uses: int128/dependabot-alerts-action@v0\n  with:\n    path: |\n      **\n      !**/package-lock.json\n```\n\nYou can specify the `package-ecosystem` input to filter the package ecosystems to check for alerts.\nIt supports glob patterns with negation patterns (e.g. `!NPM`) and multiple patterns separated by newlines.\n\n```yaml\n- uses: int128/dependabot-alerts-action@v0\n  with:\n    package-ecosystem: |\n      NPM\n```\n\n## Specification\n\n### Inputs\n\n| Name                | Default        | Description                                       |\n| ------------------- | -------------- | ------------------------------------------------- |\n| `path`              | (required)     | Glob pattern of the file path to check for alerts |\n| `package-ecosystem` | (required)     | Glob pattern of package ecosystems (e.g. `NPM`)   |\n| `token`             | `github.token` | GitHub token                                      |\n\n### Outputs\n\n| Name                    | Description                                                                                      |\n| ----------------------- | ------------------------------------------------------------------------------------------------ |\n| `dependency-files-json` | JSON array of dependency file paths with Dependabot alerts                                       |\n| `packages-lines`        | Multiline string in the format of `package-name@version`                                         |\n| `packages-json`         | JSON object with package names as keys and versions as values (e.g. `{\"package-name\": \"1.2.3\"}`) |\n| `packages-count`        | Number of packages with Dependabot alerts                                                        |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fint128%2Fdependabot-alerts-action","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fint128%2Fdependabot-alerts-action","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fint128%2Fdependabot-alerts-action/lists"}