Merge pull request #9482 from ToolJet/feat/dependabot-csv

Dependabot csv exporter
This commit is contained in:
Adish M 2024-04-24 15:13:54 +05:30 committed by GitHub
commit a8b59db7aa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

25
.github/workflows/dependabot-csv.yml vendored Normal file
View file

@ -0,0 +1,25 @@
name: Dependatbot csv exportor
on:
workflow_dispatch:
jobs:
Exportor:
runs-on: ubuntu-22.04
steps:
- name: Export Dependabot alerts
uses: ambilykk/dependabot-alert-export@v1.0
with:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
org_name: 'ToolJet'
repo_name: 'ToolJet'
csv_path: data/vulnerability.csv
- name: Upload Vulnerability report
uses: actions/upload-artifact@v3
with:
name: vulnerability_report
path: data/vulnerability.csv