This repo shows how to use ReleaseRun's GitHub Action on a Node.js project.
The action scans your package.json and Dockerfile, checks every runtime dependency against ReleaseRun for:
- Version freshness (are you on the latest stable?)
- EOL status (is your runtime end-of-life?)
- Known CVEs (any vulnerabilities in your stack?)
- Overall health grade (A through F)
Results appear as a PR comment with badges. If any technology scores below your threshold, the check fails.
Copy .github/workflows/stack-health.yml into your own repo. That's it. No API keys, no config files, no signup.
The action posts a PR comment like:
| Technology | Version | Grade | Status |
|---|---|---|---|
| Node.js | 20.x | A | Current LTS |
| Express | 4.21 | A | Current |
| PostgreSQL | 8.13 | B | Supported |
| TypeScript | 5.7 | A | Current |