A github action that checks for open dependabot alerts in the repository before allowing a workflow to proceed.
- name: Check for Dependabot alerts
uses: ketch-com/[email protected]
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
fail-threshold: 'moderate' # You can set this to 'low', 'moderate', 'high', or 'critical'