actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
NaN Commits 1 Branch 0 Tags
7bbfa034e752445ea40215fff1c3bf9597993d3f
Commit Graph

81 Commits

Author SHA1 Message Date
Justin Holguín
bed9726f78 Make snapshot warning messages clearer and more actionable 2023-09-07 17:54:42 +00:00
Justin Holguín
ada103783f Merge remote-tracking branch 'origin/retry-on-snapshot-warnings' into juxtin/dr-snaps-pre-launch 2023-08-31 16:31:44 +00:00
Sean Murphy
7ef37f3853 Merge branch 'main' into comment-on-failure 2023-08-09 17:31:16 -04:00
Adrien Pessu
c280c303e6 debug 2023-08-08 16:51:40 +02:00
Adrien Pessu
00f1f5b642 add tests and docs 2023-08-07 14:07:46 +02:00
Adrien Pessu
6862f6f65f add groups 2023-08-07 14:07:26 +02:00
Adrien Pessu
309d082d5f initial commit 2023-08-07 14:07:26 +02:00
Sean Murphy
902e86c6f5 Add on-failure option to comment-summary-in-pr setting 2023-08-04 22:37:51 -04:00
Henri Maurer
d3fa764646 fix 2023-06-14 10:38:45 +01:00
Henri Maurer
1856a6de19 fix 2023-06-14 10:26:22 +01:00
Henri Maurer
5573b58443 better logging 2023-06-14 10:24:40 +01:00
Henri Maurer
50954e6a9a fix 2023-06-09 10:30:56 +01:00
Henri Maurer
66b6f67835 Add configs 2023-06-09 10:26:24 +01:00
Henri Maurer
1644401f8d rewrite retry logic 2023-06-08 18:11:13 +01:00
Henri Maurer
1a326fc7fa proceed even if warnings 2023-06-08 17:04:40 +01:00
Henri Maurer
a82096e68a fix 2023-06-07 16:51:53 +01:00
Henri Maurer
9dde5949a8 retry every 10s 2023-06-07 16:39:16 +01:00
Henri Maurer
d35955ebf6 Prototype re-try on snapshot warnings 2023-06-06 16:44:27 +01:00
Stefan Petrushevski
f1c8401a59 resolve merge conflicts 2023-05-30 18:04:26 +02:00
Stefan Petrushevski
1896d6f936 Clean up; updated docs 2023-04-06 10:49:30 +02:00
Stefan Petrushevski
9ad7edb033 switched to purl format 2023-04-06 09:37:42 +02:00
Justin Holguín
419396de41 Show snapshot warnings in the summary 2023-03-22 21:30:12 +00:00
Stefan Petrushevski
600458c5dd licenses check exclusion list 2023-03-08 12:38:34 +01:00
David Losert
6b34d93738 Skips dependency review if no changes detected 2023-03-02 07:47:09 +00:00
David Losert
6315b3822f Renames variable to be more speaking 2023-02-28 12:27:55 +00:00
David Losert
19ee172e7e feat: Adjusts the formatting and content for the status header 2023-02-22 14:05:52 +00:00
David Losert
1c85e9db8d Adds option to write summary into a pr comment 2023-02-16 10:03:16 +00:00
Chad Bentz
e6aba92fb0 Enhance failure message to include GHAS note 2023-01-05 17:26:46 +00:00
cnagadya
6d941b396a Fix inconsistencies due to zod defaults / partials mixup 2022-11-07 17:08:00 +00:00
cnagadya
b4a2fbfa16 Complete functionality for handling remote config file 2022-11-04 14:51:41 +00:00
Eric Cornelissen
84921e5e4a Simplify Summary summary based on license-check and vulnerability-check 
Omit details related to the license check of vulnerability check from
the GitHub Actions Summary's summary if the respective check is disabled
from the configuration.
 2022-10-28 22:15:44 +02:00
Eric Cornelissen
31279d265a Add license-check and vulnerability-check inputs 
Add support for two new inputs, named `license-check` and
`vulnerability-check`, to disable the license checks or vulnerability
checks performed by this action. By default, both are enabled.
 2022-10-28 22:06:05 +02:00
cnagadya
216fafaed5 PR feedback 
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-28 11:23:05 +02:00
cnagadya
7b16bd0b54 Add unvalidated changes to summary 2022-10-27 16:24:30 +00:00
cnagadya
022ea02fbb Add unresolved licenses section 2022-10-27 13:09:37 +00:00
cnagadya
d1e9a12830 Resolve conflicts 2022-10-13 11:06:40 +00:00
Federico Builes
2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <cnagadya@github.com>
 2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes
ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico Builes
468485fc8e Clean up the main script a bit. 2022-09-27 12:25:12 +02:00
Federico Builes
0515f5cb39 Adding a skeleton for scanned dependencies in the summary. 2022-09-26 19:14:04 +02:00
Federico Builes
2d1d679f58 Move manifest grouping outside main.ts 2022-09-26 19:13:25 +02:00
Federico Builes
a3563a05bc Use a set instead of raw JS objects. 2022-09-26 12:41:16 +02:00
Federico Builes
8a20ddbf25 try adding 3 sections 2022-09-26 12:21:24 +02:00
Federico Builes
60be833ffd Update manifest formatting in output. 2022-09-26 12:01:39 +02:00
Federico Builes
000837f2ac Don't nest groups. 2022-09-26 11:41:02 +02:00
Federico Builes
89f99d150a adding colors to the dep output 2022-09-26 11:35:05 +02:00
Federico Builes
78c7c01396 Merge branch 'main' into add-scanned-deps 
# Conflicts:
#	dist/index.js.map
 2022-09-26 08:47:23 +02:00
Sarah Aladetan
4f00b72b84 filter allowed ghsas in action flow 2022-09-22 22:25:21 +00:00
Federico Builes
723ec8c0d3 Try showing information about the scanned dependencies. 2022-09-22 16:49:45 +02:00