We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5973bec commit c5cee24Copy full SHA for c5cee24
1 file changed
.github/workflows/dotnet-core.yml
@@ -36,8 +36,11 @@ jobs:
36
run: dotnet tool install -g nbgv
37
- name: Set Version
38
run: nbgv cloud
39
- - name: Check vulnerable NuGet packages
40
- uses: elmahio/github-check-vulnerable-nuget-packages-action@v2
+ - name: Checking for external vulnerabilites
+ run: |
41
+ dotnet list package --vulnerable --include-transitive 2>&1 | tee vuln.log
42
+ echo "Analyze dotnet list package..."
43
+ ! grep -q -i "has the following vulnerable packages" vuln.log
44
- name: Build
45
run: dotnet build --configuration Release --no-restore
46
0 commit comments