diff --git a/action.yaml b/action.yaml index 87047c86..e7ea3405 100644 --- a/action.yaml +++ b/action.yaml @@ -20,6 +20,7 @@ inputs: description: 'A block of Markdown that will be appended to any PR comments posted' required: false eval-indirect-dependencies: + deprecationMessage: 'Deprecated in favor of SCA configurations' description: 'Show vulnerabilities found in transitive dependencies' required: false default: false @@ -95,5 +96,4 @@ runs: debug: '${{ inputs.debug }}' token: '${{ inputs.token || github.token }}' footer: '${{ inputs.footer }}' - eval-indirect-dependencies: '${{ inputs.eval-indirect-dependencies }}' artifact-prefix: '${{ inputs.artifact-prefix }}' diff --git a/src/index.ts b/src/index.ts index e4da6457..00f79bc5 100644 --- a/src/index.ts +++ b/src/index.ts @@ -41,7 +41,6 @@ async function runAnalysis() { info('Analyzing ' + target) telemetryCollector.addField('tools', 'sca') - const indirectDeps = getInput('eval-indirect-dependencies') const toUpload: string[] = [] // command to print both sarif and lwjson formats @@ -49,9 +48,6 @@ async function runAnalysis() { if (target === 'push') { args.push('--save-results') } - if (indirectDeps.toLowerCase() === 'false') { - args.push('--eval-direct-only') - } if (debug()) { args.push('--debug') }