feat(COD-2102): Add an option to use CAA data

action.yaml

@@ -39,6 +39,10 @@ inputs:
     description: 'Set to true to enable automated pull-requests for fix suggestions'
     required: false
     default: false
+  dynamic:
+    description: 'Set to true to integrate SCA results with dynamic data, such as package activity'
+    required: false
+    default: false
 outputs:
   old-completed:
     description: 'If running a target called old, whether the analysis for this was completed'

src/index.ts

@@ -9,6 +9,7 @@ import {
 import { compareResults, createPRs, printResults } from './tool'
 import {
   autofix,
+  dynamic,
   callCommand,
   callLaceworkCli,
   debug,
@@ -67,6 +68,9 @@ async function runAnalysis() {
     if (autofix()) {
       args.push('--fix-suggestions')
     }
+    if (dynamic()) {
+      args.push('--dynamic')
+    }
     await callLaceworkCli(...args)
     // make a copy of the sarif file
     args = [scaSarifReport, scaReport]

src/util.ts

@@ -27,6 +27,10 @@ export function autofix() {
   return getBooleanInput('autofix')
 }
 
+export function dynamic() {
+  return getBooleanInput('dynamic')
+}
+
 export function getRunUrl(): string {
   let result = getRequiredEnvVariable('GITHUB_SERVER_URL')
   result += '/'