What does CircleCI Orb Dependency Scanner do?
Scans CircleCI config.yml for outdated orb versions using the CircleCI Orbs Registry API. Reports CVEs linked to orb dependencies via Snyk vulnerability database lookups.
Installation
Use the upstream install or setup path that matches your environment:
- git clone https://github.com/circleci/circleci-docs.git
- npm ci
- npm run start:dev
Basic usage or getting-started notes:
-
| README.md | Project overview and basic usage |
-
For Contributors
-
Extracted from upstream docs: https://raw.githubusercontent.com/circleci/circleci-docs/HEAD/README.md