Repository navigation
Develra v0.1.1
Develra v0.1.1 is a security maintenance release for the bundled GitHub
Action. Scanner behavior and lockfile output are unchanged from v0.1.0.
Security
- Updated the official GitHub Actions toolkit dependency from
@actions/core
1.11.1 to 2.0.3. - Replaced bundled
undici5.29.0 with patched 6.28.0. - Confirmed the production dependency graph has no known vulnerabilities with
pnpm audit --prod.
The standalone npm CLI continues to have zero runtime dependencies and default
scans remain offline.
Verify the release
npx develra@0.1.1 --version
npx develra@0.1.1 scanUse the patched Action channel in GitHub workflows:
- uses: develra-dev/develra@v0
with:
command: checkFull documentation and source: https://github.com/develra-dev/develra