Skip to content

Releases: getprovenant/provenant-action

Release list

v1.0.0

v1.0.0 Latest
Marketplace
Latest
Marketplace

Choose a tag to compare

View all tags
@mstykow mstykow released this 11 Jul 18:03
v1.0.0
c3cce92
This commit was signed with the committer’s verified signature.
mstykow Maxim Stykow
GPG key ID: F5C02B1B8770FC21
Verified
Learn about vigilant mode.

First release of the Provenant GitHub Action — run the Provenant license, copyright, and SBOM scanner in a workflow.

Highlights

  • Scan the checked-out repo (or specific paths) and emit any Provenant output format.
  • Changed-file PR scans via paths-file (feed it git diff --name-only).
  • CI license gating: license-policy + fail-on (error|warning) fails the build on a disallowed license.
  • SARIF output (sarif-file) for pull-request and code-scanning alerts.

The action always runs the latest published Provenant release; pin the action with @v1.

Assets 2
Loading