Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make GHES support / setup more clear #534

Merged
merged 3 commits into from Jul 19, 2023
Merged

Make GHES support / setup more clear #534

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3290c85
Make GHES support more clear
rajbos Jul 19, 2023
f015f96
Update README.md
febuiles Jul 19, 2023
0a68c5d
Update README.md
febuiles Jul 19, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
6 changes: 3 additions & 3 deletions README.md
View file
Open in desktop
@@ -1,4 +1,4 @@
# dependency-review-action
dependency-review-action
febuiles marked this conversation as resolved.
Show resolved Hide resolved

This action scans your pull requests for dependency changes, and will
raise an error if any vulnerabilities or invalid licenses are being introduced. The action is supported by an [API endpoint](https://docs.github.com/en/rest/reference/dependency-graph#dependency-review) that diffs the dependencies between any two revisions on your default branch.
Expand Down Expand Up @@ -43,7 +43,7 @@ This action is available in Enterprise Server starting with version 3.6. Make su
Security](https://docs.github.com/en/enterprise-server@3.6/admin/code-security/managing-github-advanced-security-for-your-enterprise/enabling-github-advanced-security-for-your-enterprise)
and [GitHub
Connect](https://docs.github.com/en/enterprise-server@3.6/admin/github-actions/managing-access-to-actions-from-githubcom/enabling-automatic-access-to-githubcom-actions-using-github-connect)
are enabled.
are enabled and that you sync the [dependency-review-action](https://github.com/actions/dependency-review-action) on to the server.
febuiles marked this conversation as resolved.
Show resolved Hide resolved

You can use the same workflow as above, replacing the `runs-on` value
with the label of any of your runners (the default label
Expand Down Expand Up @@ -144,7 +144,7 @@ For more examples of how to use this action and its configuration options, see t

### Considerations

- Checking for licenses is not supported on Enterprise Server.
- Checking for licenses is not supported on Enterprise Server as the API does not return license information.
- The action will only accept one of the two `license` parameters; an error will be raised if you provide both.
- We don't have license information for all of your dependents. If we can't detect the license for a dependency **we will inform you, but the action won't fail**.

Expand Down