actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding a skeleton for scanned dependencies in the summary.

Browse Source
This commit is contained in:
Federico Builes
2022-09-26 19:14:04 +02:00
parent 2d1d679f58
commit 0515f5cb39
4 changed files with 61 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/main.ts
View File

@@ -3,7 +3,7 @@ import * as dependencyGraph from './dependency-graph'
import * as github from '@actions/github'
import styles from 'ansi-styles'
import {RequestError} from '@octokit/request-error'
import {Change, Severity, Scope} from './schemas'
import {Change, Severity, Changes} from './schemas'
import {readConfig} from '../src/config'
import {
filterChangesBySeverity,
@@ -27,18 +27,15 @@ async function run(): Promise<void> {
})
const minSeverity = config.fail_on_severity
const allowedGhsas = config.allow_ghsas || []
const scopes = config.fail_on_scopes || []
const licenses = {
allow: config.allow_licenses,
deny: config.deny_licenses
}
const scopes = config.fail_on_scopes
const scopedChanges = filterChangesByScopes(scopes as Scope[], changes)
const allowedGhsas: string[] = config.allow_ghsas || []
const scopedChanges = filterChangesByScopes(scopes, changes)
const filteredChanges = filterOutAllowedAdvisories(
allowedGhsas,
scopedChanges
@@ -62,6 +59,7 @@ async function run(): Promise<void> {
summary.addSummaryToSummary(addedChanges, licenseErrors, unknownLicenses)
summary.addChangeVulnerabilitiesToSummary(addedChanges, minSeverity || '')
summary.addLicensesToSummary(licenseErrors, unknownLicenses, config)
summary.addScannedDependencies(changes)
printVulnerabilitiesBlock(addedChanges, minSeverity || 'low')
printLicensesBlock(licenseErrors, unknownLicenses)