diff --git a/.github/workflows/dependencies-review.yml b/.github/workflows/dependencies-review.yml index f9007161b8..caf7f29938 100644 --- a/.github/workflows/dependencies-review.yml +++ b/.github/workflows/dependencies-review.yml @@ -35,14 +35,19 @@ jobs: continue-on-error: true - name: Debug govulncheck Output run: cat govulncheck-output.txt || echo "govulncheck-output.txt is empty!" - - name: Comment on PR - if: env.govulncheck_output != '' - uses: mshick/add-pr-comment@v2 + - name: Add comment to PR + uses: actions/github-script@v7 with: - repo-token: ${{ secrets.GITHUB_TOKEN }} - message: | - ⚠️ **govulncheck found vulnerabilities:** - ``` - ${{ env.govulncheck_output }} - ``` - message-id: govulncheck-warning \ No newline at end of file + github-token: ${{ secrets.GITHUB_TOKEN }} + script: | + github.rest.issues.createComment({ + owner: context.repo.owner, + issue_number: context.issue.number, + repo: context.repo.repo, + body: ` + ⚠️ **govulncheck found vulnerabilities:** + + + >${{ env.govulncheck_output }} + ` + }) \ No newline at end of file