Home / Companies / GitHub / Blog / Post Details
Content Deep Dive

Dependency graph now supports GitHub Actions

Blog post from GitHub

Post Details
Company
Date Published
Author
Justin Hutchings
Word Count
295
Language
English
Hacker News Points
-
Summary

GitHub has expanded its dependency graph to include GitHub Actions, allowing developers and maintainers to see who relies on their Actions alongside traditional open-source dependencies from package managers like npm, NuGet, Maven, or RubyGems. This enhancement enables developers to view their Actions workflows within the Insights/Dependency Graph interface and see which repositories depend on their Actions under the Dependencies tab or via the "Used By" count on their repository homepage, excluding private repositories. The dependency graph plays a crucial role in GitHub's supply chain security by helping developers understand their dependencies, a vital step towards software security. Additionally, developers can use Dependabot to automatically update their Actions dependencies, and they are encouraged to follow GitHub's public roadmap for future supply chain improvements.