nerdexam
Microsoft

GH-500 · Question #104

Which of the following workflow events would trigger a dependency review? (Each answer presents a complete solution. Choose two.)

The correct answer is A. commit D. pull_request. About the dependency review action The "dependency review action" refers to the specific action that can report on differences in a pull request within the GitHub Actions context. You can use the dependency review action in your repository to enforce dependency reviews on your…

Configure and use Dependabot and Dependency Review

Question

Which of the following workflow events would trigger a dependency review? (Each answer presents a complete solution. Choose two.)

Options

  • Acommit
  • Btrigger
  • Cworkflow_dispatch
  • Dpull_request

How the community answered

(47 responses)
  • A
    91% (43)
  • B
    2% (1)
  • C
    6% (3)

Explanation

About the dependency review action The "dependency review action" refers to the specific action that can report on differences in a pull request within the GitHub Actions context. You can use the dependency review action in your repository to enforce dependency reviews on your pull requests. [D] The action uses the dependency review REST API to get the diff of dependency changes between the base commit and head commit. You can use the dependency review API to get the diff of dependency changes, including vulnerability data, between any two commits on a [D] dependency-review-action The dependency review action scans your pull requests for dependency changes, and will raise an error if any vulnerabilities or invalid licenses are being introduced. The action is supported by an API endpoint that diffs the dependencies between any two revisions on your default branch. [Not B] The workflow_dispatch event adds a layer of flexibility and control to your GitHub workflows, enabling manual triggers with custom inputs. Whether integrating with external systems or managing deployments directly from GitHub, workflow_dispatch provides the tools necessary for robust workflow management.

Topics

#Dependency Review#GitHub Actions#Workflow Triggers#GHAS

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice