Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/pyupio/safety-action
Runs the Safety CLI dependency scanner against your project
https://github.com/pyupio/safety-action
Last synced: 2 months ago
JSON representation
Runs the Safety CLI dependency scanner against your project
- Host: GitHub
- URL: https://github.com/pyupio/safety-action
- Owner: pyupio
- Created: 2024-01-18T05:18:58.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-06-10T14:04:16.000Z (8 months ago)
- Last Synced: 2024-06-10T16:09:32.560Z (8 months ago)
- Language: Shell
- Homepage:
- Size: 13.7 KB
- Stars: 3
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
Awesome Lists containing this project
README
# Using Safety as a GitHub Action
Safety can be integrated into your existing GitHub CI pipeline as an action. Just add the following as a step in your workflow YAML file after setting your `SAFETY_API_KEY` secret on GitHub under Settings -> Secrets -> Actions:
```yaml
- uses: pyupio/safety-action@v1
with:
api-key: ${{ secrets.SAFETY_API_KEY }}
```(Don't have an API Key? You can sign up for one with [https://safetycli.com/resources/plans](https://safetycli.com/resources/plans).)
This will run Safety scan and It'll fail your CI pipeline if any vulnerable packages are found.
If you have something more complicated such as a monorepo; or once you're finished testing, read the [Documentation](https://docs.safetycli.com/) for more details on configuring Safety as an action.