You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+8-6Lines changed: 8 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,7 +22,7 @@
22
22
## Overview
23
23
24
24
The dependency review action scans your pull requests for dependency changes, and will raise an error if any vulnerabilities or invalid licenses are being introduced.
25
-
The action is supported by an [API endpoint](https://docs.github.com/en/rest/dependency-graph/dependency-review?apiVersion=2022-11-28) that diffs the dependencies between any two revisions on your default branch.
25
+
The action is supported by an [API endpoint](https://docs.github.com/en/rest/dependency-graph/dependency-review?apiVersion=2026-03-10) that diffs the dependencies between any two revisions on your default branch.
26
26
27
27
The action is available for:
28
28
@@ -54,6 +54,8 @@ When the action runs, you can see the results on:
54
54
55
55
You can install the action on any public repository, or any organization-owned private repository, provided the organization has a GitHub Advanced Security license.
56
56
57
+
> Note: Dependency Review Action v5.0.0 updates the runtime to node24. This requires a minimum Actions Runner version [v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) to run.
58
+
57
59
1. Add a new YAML workflow to your `.github/workflows` folder:
58
60
59
61
```yaml
@@ -70,7 +72,7 @@ You can install the action on any public repository, or any organization-owned p
70
72
- name: 'Checkout Repository'
71
73
uses: actions/checkout@v6
72
74
- name: 'Dependency Review'
73
-
uses: actions/dependency-review-action@v4
75
+
uses: actions/dependency-review-action@v5
74
76
```
75
77
76
78
#### Installation (GitHub Enterprise Server)
@@ -95,7 +97,7 @@ You can install the action on repositories on GitHub Enterprise Server.
95
97
- name: 'Checkout Repository'
96
98
uses: actions/checkout@v6
97
99
- name: 'Dependency Review'
98
-
uses: actions/dependency-review-action@v4
100
+
uses: actions/dependency-review-action@v5
99
101
```
100
102
101
103
4. In the workflow file, replace the `runs-on` value with the label of any of your runners. (The default value is `self-hosted`.)
@@ -164,7 +166,7 @@ You can pass configuration options to the dependency review action using your wo
164
166
- name: 'Checkout Repository'
165
167
uses: actions/checkout@v6
166
168
- name: Dependency Review
167
-
uses: actions/dependency-review-action@v4
169
+
uses: actions/dependency-review-action@v5
168
170
with:
169
171
fail-on-severity: moderate
170
172
@@ -191,7 +193,7 @@ You can use an external configuration file to specify settings for this action.
0 commit comments