v1.3.0

fix: refine action description for clarity on risk threshold evaluation

v1.1.0

Full Changelog: v1.0.0...v1.1.0

v1.0.0

Initial release of the Attestd dependency check action.

Check a software dependency against the Attestd security risk API and fail your workflow if the risk state meets a configured threshold.

Inputs: product, version, api_key, fail_on (critical / high / elevated / any / never)
Outputs: risk_state, actively_exploited, fixed_version, cve_ids

Get a free API key at https://api.attestd.io/portal/login
Supported products: https://attestd.io/docs/products