Home

@kunalnagarco/action-cve

A GitHub action that sends Dependabot Vulnerability Alerts to multiple sources:

• Slack
• PagerDuty

Usage

name: 'Check for Vulnerabilities'

on:
  schedule:
    - cron: '0 */6 * * *' # every 6 hours

jobs:
  main:
    runs-on: ubuntu-latest
    steps:
      # X.X.X - Latest version available at: https://github.com/kunalnagarco/action-cve/releases
      - uses: kunalnagarco/[email protected]
        with:
          token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
          slack_webhook: ${{ secrets.SLACK_WEBHOOK }}
          pager_duty_integration_key: ${{ secrets.PAGER_DUTY_INTEGRATION_KEY }}
          count: 10

Action Inputs

Input	Description
token	GitHub Personal Access Token. Create one here
slack_webhook	Slack Incoming Webhook URL. More info here
pager_duty_integration_key	Pager Duty Service Integration Key. Also known as Routing key. More info here
count	Number of alerts to send. Defaults to 20

Attributions

• Bug icon: Made by Freepik from https://www.flaticon.com/