flashbots / flashbots/mev-boost
Feature-request: add nancy to check for vulnerable dependencies
Open
- Dominant language
- Go
- Stars
- 1.4k
- Forks
- 292
- PR merge metrics
- No merged PRs in 30d
Description
https://github.com/sonatype-nexus-community/nancy-github-action
Contributor guide
Research direction
The issue only links to the nancy-github-action project. Start by reviewing that action and the repository's existing GitHub Actions configuration to identify the appropriate workflow entry point. Done means dependency vulnerability checks run through Nancy in CI, with the expected failure behavior confirmed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100