actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
692 Commits 1 Branch 0 Tags
ae538ebe3271a5039e047451aa4e950abc8b2780
Commit Graph

692 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes
ae538ebe32 Linting and whitespace. Smol rename. 2022-11-09 13:17:12 +01:00
Federico Builes
b4126ce983 Shuffle things around. 2022-11-09 13:16:53 +01:00
Federico Builes
418ae59d51 Replace TODO with instructions for getting PAT. 2022-11-08 17:51:31 +01:00
Federico Builes
c38007a979 Don't abbreviate repo in docs. 
In general let's try not to use abbreviations in public
documentation.
 2022-11-08 17:45:23 +01:00
cnagadya
ebe5527e72 Fix readme typo 2022-11-08 11:23:48 +00:00
cnagadya
1589654682 Add dist changes 2022-11-08 11:16:48 +00:00
cnagadya
f0ff0b670a Rename config token > external-repo-token 2022-11-08 11:16:26 +00:00
cnagadya
336da03de2 Update empty allow-licenses tests 2022-11-08 11:15:36 +00:00
cnagadya
78565a954f Dont merge config lists 
Co-authored-by: Henri Maurer<hmaurer@github.com>
Co-authored-by: Federico Builes<febuiles@github.com>
 2022-11-08 10:52:30 +00:00
cnagadya
3c73a622ba Fix config-file tests 2022-11-08 09:53:36 +00:00
cnagadya
13455c7175 Merge array config options 2022-11-07 17:57:05 +00:00
cnagadya
6d941b396a Fix inconsistencies due to zod defaults / partials mixup 2022-11-07 17:08:00 +00:00
cnagadya
49ed3f2876 Merge lists in configs instead of overwritting them 2022-11-07 12:33:54 +00:00
cnagadya
b55cddb69d Use config-file for both remote and local config-files 2022-11-07 12:12:03 +00:00
cnagadya
dcdeb7de77 Remove redundant skips 
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-11-04 16:12:05 +00:00
cnagadya
b4a2fbfa16 Complete functionality for handling remote config file 2022-11-04 14:51:41 +00:00
cnagadya
97e5a607ba Handle getContent response as is 
Co-authored-by: Henri Maurer <hmaurer@github.com>
 2022-11-04 10:08:00 +00:00
cnagadya
3b410dc4ad Load remote config file 2022-11-04 09:05:45 +00:00
Federico Builes
683cbc4872 Merge branch 'main' into external-repo-config 2022-11-01 08:11:26 +01:00
Federico Builes
2f696d8c7a Merge pull request #314 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 
Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0
 2022-11-01 08:10:28 +01:00
dependabot[bot]
1a9033d563 Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.41.0 to 5.42.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.42.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 07:10:21 +00:00
Federico Builes
ad6e320da1 Merge pull request #313 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.0 
Bump @typescript-eslint/parser from 5.41.0 to 5.42.0
 2022-11-01 08:09:22 +01:00
dependabot[bot]
3d86825394 Bump @typescript-eslint/parser from 5.41.0 to 5.42.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.41.0 to 5.42.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.42.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 01:49:12 +00:00
Federico Builes
10dc05ba09 Merge pull request #311 from ericcornelissen/308-disable-license-or-vuln 
Add `license-check` and `vulnerability-check` inputs
 2022-10-31 07:56:37 +01:00
Federico Builes
04f48dec81 Update __tests__/config.test.ts 2022-10-31 07:55:17 +01:00
Federico Builes
bb5c0c7ca0 Merge pull request #312 from actions/dependabot/npm_and_yarn/types/node-16.18.3 
Bump @types/node from 16.18.2 to 16.18.3
 2022-10-31 06:42:09 +01:00
dependabot[bot]
2d7d700469 Bump @types/node from 16.18.2 to 16.18.3 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.2 to 16.18.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-31 01:33:50 +00:00
Eric Cornelissen
f095b5a541 Build and package 2022-10-28 22:25:06 +02:00
Eric Cornelissen
f54a1f3b74 Document the license-check & vulnerability-check config options 
Include the license-check and vulnerability-check options in the config
documentation in the README.

Also fix a typo in the README ("configuraton" -> "configuration").
 2022-10-28 22:23:33 +02:00
Eric Cornelissen
84921e5e4a Simplify Summary summary based on license-check and vulnerability-check 
Omit details related to the license check of vulnerability check from
the GitHub Actions Summary's summary if the respective check is disabled
from the configuration.
 2022-10-28 22:15:44 +02:00
Eric Cornelissen
c5af7ff272 Prevent disabling all checks 
Prevent users from disabling both the license and vulnerability check by
checking if both are set to `false` and throwing if that's the case.
 2022-10-28 22:08:55 +02:00
Eric Cornelissen
31279d265a Add license-check and vulnerability-check inputs 
Add support for two new inputs, named `license-check` and
`vulnerability-check`, to disable the license checks or vulnerability
checks performed by this action. By default, both are enabled.
 2022-10-28 22:06:05 +02:00
Federico Builes
2532504548 Merge pull request #310 from actions/cn/node-18 
Upgrade to Node 18
 2022-10-28 13:46:26 +02:00
cnagadya
cc6d251652 Update contributing guide 2022-10-28 10:13:58 +00:00
cnagadya
516e8497ac Add codespace defaults 2022-10-28 10:13:58 +00:00
cnagadya
43c5083e6c Node 18 2022-10-28 10:13:58 +00:00
Federico Builes
fa62a0febc Merge pull request #294 from actions/cn/spdx-licenses 
Add support for SPDX expressions
 2022-10-28 11:27:18 +02:00
cnagadya
e897e8ebdd Add dist folder 2022-10-28 09:25:16 +00:00
cnagadya
216fafaed5 PR feedback 
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-28 11:23:05 +02:00
cnagadya
0144419c8e Format violations area 2022-10-27 16:43:45 +00:00
cnagadya
7b16bd0b54 Add unvalidated changes to summary 2022-10-27 16:24:30 +00:00
cnagadya
4525a8c091 Format summary findings 2022-10-27 15:41:19 +00:00
cnagadya
72273c9a36 Update dist folder 2022-10-27 15:22:00 +00:00
cnagadya
562a2f3c0a Improve summary formatting 2022-10-27 15:19:32 +00:00
cnagadya
c82c183029 Resolve package-lock conflicts 2022-10-27 14:37:08 +00:00
cnagadya
26be1f407e Merge pull request #309 from actions/codespace-actions-dependency-review-action-p79j7j9pxqrh669p 
Add unresolved licenses section
 2022-10-27 15:43:28 +02:00
cnagadya
022ea02fbb Add unresolved licenses section 2022-10-27 13:09:37 +00:00
Federico Builes
d6e28cdfae Merge pull request #307 from actions/dependabot/npm_and_yarn/types/node-16.18.2 
Bump @types/node from 16.18.0 to 16.18.2
 2022-10-27 07:34:11 +02:00
dependabot[bot]
da3d8af3e3 Bump @types/node from 16.18.0 to 16.18.2 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.0 to 16.18.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-27 01:26:35 +00:00
cnagadya
52fa73c086 Update readme licenses sections 2022-10-26 10:54:12 +00:00