|
4 | 4 | - [Overview](#overview) |
5 | 5 | - [Viewing the results](#viewing-the-results) |
6 | 6 | - [Installation](#installation) |
7 | | - - [Installation (standard)](#installation-standard) |
8 | | - - [Installation (GitHub Enterprise Server)](#installation-github-enterprise-server) |
| 7 | + - [Installation (standard)](#installation-standard) |
| 8 | + - [Installation (GitHub Enterprise Server)](#installation-github-enterprise-server) |
9 | 9 | - [Configuration](#configuration) |
10 | 10 | - [Configuration options](#configuration-options) |
11 | 11 | - [Configuration methods](#configuration-methods) |
@@ -130,6 +130,7 @@ All configuration options are optional. |
130 | 130 | | `warn-only`+ | When set to `true`, the action will log all vulnerabilities as warnings regardless of the severity, and the action will complete with a `success` status. This overrides the `fail-on-severity` option. | `true`, `false` | `false` | |
131 | 131 | | `show-openssf-scorecard` | When set to `true`, the action will output information about all the known OpenSSF Scorecard scores for the dependencies changed in this pull request. | `true`, `false` | `true` | |
132 | 132 | | `warn-on-openssf-scorecard-level` | When `show-openssf-scorecard-levels` is set to `true`, this option lets you configure the threshold for when a score is considered too low and gets a :warning: warning in the CI. | Any positive integer | 3 | |
| 133 | +| `show-patched-versions`\* | When set to `true`, the vulnerability summary table will include an additional column showing the first patched version for each vulnerability. This requires additional API calls to fetch advisory data. | `true`, `false` | `false` | |
133 | 134 |
|
134 | 135 | > [!NOTE] |
135 | 136 | > |
@@ -215,6 +216,7 @@ You can use an external configuration file to specify settings for this action. |
215 | 216 |
|
216 | 217 | 3. Create the configuration file in the path you specified for `config-file`. |
217 | 218 | 4. In the configuration file, specify your chosen settings. |
| 219 | + |
218 | 220 | ```yaml |
219 | 221 | fail-on-severity: 'critical' |
220 | 222 | allow-licenses: |
|
0 commit comments