Skip to content

Commit 428b2ee

Browse files
committed
Clean up readme
1 parent bf47139 commit 428b2ee

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

README.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,12 @@
1-
# Conda dependency submission action
2-
3-
This repository scans Conda environment.yaml files and uploads the results to the dependency graph. While GitHub does not support alerting on OS-level dependencies, it will alert on any PyPI dependencies that are defined in the environment.yaml.
1+
# Component detection action
42

3+
This GitHub Action runs the [microsoft/component-detection](https://github.com/microsoft/component-detection) library to automate dependency extraction at build time. It uses a combination of static and dynamic scanning to build a dependency tree and then uploads that to GitHub's dependency graph via the dependency submission API. This gives you more accurate Dependabot alerts, and support for a bunch of additional ecosystems.
54

65
### Example workflow
76

87
```yaml
98

10-
name: Conda dependency submission
9+
name: Component Detection
1110

1211
on:
1312
workflow_dispatch:
@@ -23,5 +22,5 @@ jobs:
2322
steps:
2423
- uses: actions/checkout@v3
2524
- name: Conda dependency scanning
26-
uses: jhutchings1/conda-dependency-submission-action@v0.0.2
25+
uses: jhutchings1/component-detection-action@v0.0.1
2726
```

0 commit comments

Comments
 (0)