jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-23 21:07:12 -05:00
Code Issues Projects Releases Wiki Activity

Added public beta note for action

Browse Source
This commit is contained in:
Sarita Iyer
2022-03-30 17:12:14 -04:00
parent bce2a24359
commit ff5d365918
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review.md
View File

@@ -54,6 +54,8 @@ The dependency review feature becomes available when you enable the dependency g
{% ifversion fpt or ghec or ghes > 3.5 or ghae-issue-6396 %}
## Dependency review enforcement
{% data reusables.dependency-review.dependency-review-action-beta-note %}
You can use the Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests, and warns you about the associated security vulnerabilities. This gives you better visibility of what's changing in a pull request, and helps prevent vulnerabilities being added to your repository. For more information, see [`dependency-review-action`](https://github.com/actions/dependency-review-action).
![Dependency review action example](/assets/images/help/graphs/dependency-review-action.png)

5
data/reusables/dependency-review/dependency-review-action-beta-note.md Normal file
View File

@@ -0,0 +1,5 @@
{% note %}
**Note**: The Dependency Review GitHub Action is currently in public beta and subject to change.
{% endnote %}