Software Composition Analysis (SCA) GitHub Workflow#

The software-composition-analysis (SCA) workflow performs Software Composition Analysis (SCA) to detect vulnerabilities in your project's dependencies. It scans your software for outdated or vulnerable third-party libraries, helping you manage risks early in the development process.

The sca workflow accepts the following inputs:

Usage Example:#

Here's an example of how to call this reusable workflow from another workflow file:

name: DevGuard Workflow

on:
    push

jobs:
    devguard-sca:
        uses: l3montree-dev/devguard-action/.github/workflows/sca.yml@main
        with:
          api-url: https://api.devguard.org
          asset-name: 'myOrganization/projects/myProject/assets/myAsset'
        secrets:
          devguard-token: ${{ secrets.DEVGUARD_TOKEN }}