actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Parse purls cautiously in getDeniedChanges

Browse Source
This commit is contained in:
Justin Holguín
2024-04-26 21:28:24 +00:00
committed by GitHub
parent 0659a74c94
commit a3460920cc
3 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
dist/index.js generated vendored
View File

@@ -185,7 +185,14 @@ function getDeniedChanges(changes_1) {
const changesDenied = [];
let hasDeniedPackage = false;
for (const change of changes) {
const changedPackage = packageurl_js_1.PackageURL.fromString(change.package_url);
let changedPackage;
try {
changedPackage = packageurl_js_1.PackageURL.fromString(change.package_url);
}
catch (error) {
core.error(`Error parsing package URL: ${error}`);
continue;
}
for (const denied of deniedPackages) {
if ((!denied.version || changedPackage.version === denied.version) &&
changedPackage.name === denied.name) {

2
dist/index.js.map generated vendored
View File

File diff suppressed because one or more lines are too long

8
src/deny.ts
View File

@@ -11,7 +11,13 @@ export async function getDeniedChanges(
let hasDeniedPackage = false
for (const change of changes) {
const changedPackage = PackageURL.fromString(change.package_url)
let changedPackage: PackageURL
try {
changedPackage = PackageURL.fromString(change.package_url)
} catch (error) {
core.error(`Error parsing package URL: ${error}`)
continue
}
for (const denied of deniedPackages) {
if (