actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
NaN Commits 1 Branch 0 Tags
02aa4b66a749fdd7bd8e7fb6354961e27c20e4d1
Commit Graph

67 Commits

Author SHA1 Message Date
Adrien Pessu
c280c303e6 debug 2023-08-08 16:51:40 +02:00
Adrien Pessu
00f1f5b642 add tests and docs 2023-08-07 14:07:46 +02:00
Adrien Pessu
6862f6f65f add groups 2023-08-07 14:07:26 +02:00
Adrien Pessu
309d082d5f initial commit 2023-08-07 14:07:26 +02:00
Stefan Petrushevski
f1c8401a59 resolve merge conflicts 2023-05-30 18:04:26 +02:00
Stefan Petrushevski
1896d6f936 Clean up; updated docs 2023-04-06 10:49:30 +02:00
Stefan Petrushevski
9ad7edb033 switched to purl format 2023-04-06 09:37:42 +02:00
Justin Holguín
419396de41 Show snapshot warnings in the summary 2023-03-22 21:30:12 +00:00
Stefan Petrushevski
600458c5dd licenses check exclusion list 2023-03-08 12:38:34 +01:00
David Losert
6b34d93738 Skips dependency review if no changes detected 2023-03-02 07:47:09 +00:00
David Losert
6315b3822f Renames variable to be more speaking 2023-02-28 12:27:55 +00:00
David Losert
19ee172e7e feat: Adjusts the formatting and content for the status header 2023-02-22 14:05:52 +00:00
David Losert
1c85e9db8d Adds option to write summary into a pr comment 2023-02-16 10:03:16 +00:00
Chad Bentz
e6aba92fb0 Enhance failure message to include GHAS note 2023-01-05 17:26:46 +00:00
cnagadya
6d941b396a Fix inconsistencies due to zod defaults / partials mixup 2022-11-07 17:08:00 +00:00
cnagadya
b4a2fbfa16 Complete functionality for handling remote config file 2022-11-04 14:51:41 +00:00
Eric Cornelissen
84921e5e4a Simplify Summary summary based on license-check and vulnerability-check 
Omit details related to the license check of vulnerability check from
the GitHub Actions Summary's summary if the respective check is disabled
from the configuration.
 2022-10-28 22:15:44 +02:00
Eric Cornelissen
31279d265a Add license-check and vulnerability-check inputs 
Add support for two new inputs, named `license-check` and
`vulnerability-check`, to disable the license checks or vulnerability
checks performed by this action. By default, both are enabled.
 2022-10-28 22:06:05 +02:00
cnagadya
216fafaed5 PR feedback 
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-28 11:23:05 +02:00
cnagadya
7b16bd0b54 Add unvalidated changes to summary 2022-10-27 16:24:30 +00:00
cnagadya
022ea02fbb Add unresolved licenses section 2022-10-27 13:09:37 +00:00
cnagadya
d1e9a12830 Resolve conflicts 2022-10-13 11:06:40 +00:00
Federico Builes
2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <cnagadya@github.com>
 2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes
ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico Builes
468485fc8e Clean up the main script a bit. 2022-09-27 12:25:12 +02:00
Federico Builes
0515f5cb39 Adding a skeleton for scanned dependencies in the summary. 2022-09-26 19:14:04 +02:00
Federico Builes
2d1d679f58 Move manifest grouping outside main.ts 2022-09-26 19:13:25 +02:00
Federico Builes
a3563a05bc Use a set instead of raw JS objects. 2022-09-26 12:41:16 +02:00
Federico Builes
8a20ddbf25 try adding 3 sections 2022-09-26 12:21:24 +02:00
Federico Builes
60be833ffd Update manifest formatting in output. 2022-09-26 12:01:39 +02:00
Federico Builes
000837f2ac Don't nest groups. 2022-09-26 11:41:02 +02:00
Federico Builes
89f99d150a adding colors to the dep output 2022-09-26 11:35:05 +02:00
Federico Builes
78c7c01396 Merge branch 'main' into add-scanned-deps 
# Conflicts:
#	dist/index.js.map
 2022-09-26 08:47:23 +02:00
Sarah Aladetan
4f00b72b84 filter allowed ghsas in action flow 2022-09-22 22:25:21 +00:00
Federico Builes
723ec8c0d3 Try showing information about the scanned dependencies. 2022-09-22 16:49:45 +02:00
Sarah Aladetan
0d23c39a5d filter by scope in action 2022-09-15 20:03:27 +00:00
Federico Builes
5da7945e2b Fixing lint/dist. 2022-08-18 16:15:03 +02:00
Federico Builes
0e0d6ec5d6 Merge branch 'main' into add-summary 2022-08-18 16:11:15 +02:00
Tiago Pascoal
aef949f026 Show vulnerabities and license information on the job summary. 
Users can see the results that were found directly on the job summary

All the results are grouped by manifest.

It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.

Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
 2022-08-04 15:35:07 +00:00
Will Da Silva
388b1a309d Support user-provided base/head refs & non-PR workflows 2022-07-21 15:47:05 -04:00
Kenichi Kamiya
9fdc2574b8 Fix rest eslint errors manually 2022-07-04 20:12:07 +09:00
Kenichi Kamiya
6e9189a5c1 npx eslint --fix src/**/*.ts 2022-07-04 20:12:07 +09:00
Federico Builes
1c59cdf2a9 Fix the unknown licenses error message 2022-06-16 06:03:16 +02:00
Federico Builes
963fe8045d Always print null licenses. 2022-06-15 15:22:35 +02:00
Federico Builes
42e2bc1ed2 Handle unknown licenses. 2022-06-14 13:54:27 +02:00
Federico Builes
7278093fa0 Clarify some of the error messages. 2022-06-14 07:41:37 +02:00
Federico Builes
1791775ce6 temp commit 2022-06-14 05:57:43 +02:00
Federico Builes
571f236610 Improved wording on license messages. 2022-06-13 20:08:16 +02:00
Federico Builes
4ac3d318ab Refactoring on PR feedback. 2022-06-08 17:45:42 +02:00