The Tidelift Scan GitHub action allows you to integrate a Tidelift catalog scan into your GitHub repositories.
This lets you fail PRs that add unapproved dependencies as a part of your CI/CD process.
For more information see https://docs.tidelift.com
To use this Action, you need to create a workflow like the following
name: Tidelift Scan
on: [push]
jobs:
build:
name: Run Tidelift to ensure approved open source libraries are in use
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Scan
uses: tidelift/scan-action@master
env:
TIDELIFT_API_KEY: ${{ secrets.TIDELIFT_API_KEY }}
TIDELIFT_TEAM_NAME: ${{ secrets.TIDELIFT_TEAM_NAME }}
TIDELIFT_REPOSITORY_NAME: ${{ secrets.TIDELIFT_REPOSITORY_NAME }}The example above refers to a number of secrets. These secrets can be retrieved from your Tidelift web UI in the API key section. More information on Tidelift API keys can be found in the documentation
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent