Skip to content

Send dependabot new vulnerability alerts #253

Send dependabot new vulnerability alerts

Send dependabot new vulnerability alerts #253

name: Send dependabot new vulnerability alerts
on:
schedule:
- cron: '0 2 * * *'
workflow_dispatch:
jobs:
fetch:
runs-on: ubuntu-latest
name: Fetch analysis
outputs:
alerts: ${{ steps.fetch.outputs.ALERTS }}
steps:
- id: fetch
name: Get Latest Analysis info
run: |
RESPONSE=$(curl \
-H "Accept: application/vnd.github+json" \
-H "Authorization: Bearer ${{ secrets.TOKEN }}" \
https://api.github.com/repos/${{ github.repository }}/dependabot/alerts?state=open)
echo 'ALERTS<<EOF' >> $GITHUB_OUTPUT
echo $RESPONSE >> $GITHUB_OUTPUT
echo 'EOF' >> $GITHUB_OUTPUT
notify:
runs-on: ubuntu-latest
name: Send notifications
needs: [ fetch ]
steps:
- uses: dawidd6/action-download-artifact@v2
with:
name: dependabot_alerts.json
if_no_artifact_found: warn
- name: Teams Notification
uses: DevExpress/github-actions/send-teams-notification@main
with:
hook_url: ${{ secrets.TEAMS_SECURITY_ALERTS }}
alerts: ${{ needs.fetch.outputs.alerts }}
alert_type: Dependabot
alerts_cache_file: dependabot_alerts.json
- uses: actions/upload-artifact@v3
with:
name: dependabot_alerts.json
path: dependabot_alerts.json