https://github.com/elmahio/github-check-vulnerable-nuget-packages-action
GitHub Action to check for vulnerable NuGet packages.
https://github.com/elmahio/github-check-vulnerable-nuget-packages-action
github-action github-actions github-actions-ci github-actions-docker nuget-packages vulnerabilities vulnerability vulnerability-detection vulnerability-scanners
Last synced: 5 days ago
JSON representation
GitHub Action to check for vulnerable NuGet packages.
- Host: GitHub
- URL: https://github.com/elmahio/github-check-vulnerable-nuget-packages-action
- Owner: elmahio
- Created: 2024-05-13T09:01:51.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-11-15T12:46:39.000Z (7 months ago)
- Last Synced: 2025-06-13T10:11:44.857Z (12 days ago)
- Topics: github-action, github-actions, github-actions-ci, github-actions-docker, nuget-packages, vulnerabilities, vulnerability, vulnerability-detection, vulnerability-scanners
- Language: Shell
- Homepage: https://github.com/marketplace/actions/check-vulnerable-nuget-packages
- Size: 268 KB
- Stars: 3
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
Awesome Lists containing this project
README
# Check vulnerable NuGet packages GitHub Action
This action will check for vulnerable NuGet packages in one or more projects/solutions. If vulnerable packages are found, they will be listed and the build will fail.
The code is based on [this excellent blog post by Steven Giesel](https://steven-giesel.com/blogPost/a825c041-26dc-4488-8707-17697871d08e). Development of the action is sponsored by [elmah.io](https://elmah.io).
## Inputs
### `projects`
A newline-separated list of project or solution files to operate on. If not specified, the command will search the current directory for one.
## Example usage
Check all projects and solutions for vulnerable NuGet packages:
```yml
- name: Check vulnerable NuGet packages
uses: elmahio/github-check-vulnerable-nuget-packages-action@v2
```
Check a specific project for vulnerable NuGet packages:
```yml
- name: Check vulnerable NuGet packages
uses: elmahio/github-check-vulnerable-nuget-packages-action@v2
with:
projects: |
src/HelloWorld.csproj
```