Justin Holguín
|
432d8e7efe
|
Allow slashes in purl package names
|
2024-05-02 19:11:08 +00:00 |
|
Justin Holguín
|
49fbbe0acb
|
Fix package-url parsing for allow-dependencies-licenses
|
2024-04-29 23:24:15 +00:00 |
|
Justin Holguín
|
5f0808ffb1
|
Validate that deny-packages purls are complete
|
2024-04-29 16:46:21 +00:00 |
|
Justin Holguín
|
fcc66c23b3
|
Refine purl parsing and tests
|
2024-04-28 20:33:37 +00:00 |
|
Justin Holguín
|
1dd418bcb3
|
Basic tests for PURL validation in config
|
2024-04-27 22:16:46 +00:00 |
|
Justin Holguín
|
640617990f
|
Replace packageurl-js with our own implementation
|
2024-04-27 21:26:06 +00:00 |
|
Brandon Teng
|
c32a0148b3
|
throwing parsing error up instead of swallowing it
|
2024-04-16 16:25:28 -05:00 |
|
Brandon Teng
|
67d0214607
|
simplifying tests
|
2024-04-16 16:04:25 -05:00 |
|
Brandon Teng
|
3ca15314ff
|
transforming package URLs during zod parsing
|
2024-04-16 16:04:11 -05:00 |
|
Brandon Teng
|
a318e62c6c
|
using packageurl-js to parse packages and groups from config
|
2024-04-16 12:44:51 -05:00 |
|
Brandon Teng
|
a323510dae
|
more refactoring for getDeniedChanges
|
2024-04-04 15:18:51 -05:00 |
|
Brandon Teng
|
411e5ec44f
|
updating deny-packages config option to deny exact version or wildcard
|
2024-04-04 13:25:54 -05:00 |
|
Federico Builes
|
0e665bf3ac
|
Adding a failing test.
Co-authored-by: Brandon Teng <bteng22@github.com>
|
2024-03-27 15:05:17 +01:00 |
|
Justin Hutchings
|
d684d038b2
|
Add trailing slash to tests
|
2024-03-22 21:21:52 +00:00 |
|
Justin Hutchings
|
d9209374af
|
Fix repositoryUrl issues around GitHub Actions
|
2024-03-22 21:00:38 +00:00 |
|
Justin Hutchings
|
72666694f0
|
Fix broken tests, clean up dead code
|
2024-03-12 21:32:27 +00:00 |
|
Justin Hutchings
|
ac600387ca
|
Add tests
|
2024-03-12 17:55:10 +00:00 |
|
Justin Hutchings
|
250250e73d
|
Refactor schema, add line numbers to warnings
|
2024-03-08 02:31:11 +00:00 |
|
Justin Hutchings
|
f8ebb4b946
|
Add formatting around warning for low scorecard levels
|
2024-03-04 19:34:29 +00:00 |
|
Justin Hutchings
|
2bc3ecb19b
|
Fix type issues
|
2024-03-03 06:50:11 +00:00 |
|
tgrall
|
8f3df4d674
|
fix ci failure on format-check
|
2024-02-02 06:09:20 +01:00 |
|
tgrall
|
fc49851780
|
merge from main and fix code review comment from @juxtin
|
2024-01-28 10:16:07 +01:00 |
|
Federico Builes
|
b39e17ba5e
|
Replace pip -> pypi in PURL examples
|
2023-12-11 17:23:19 +01:00 |
|
Federico Builes
|
a93fa86c77
|
Fixing test name.
|
2023-11-28 08:08:29 +01:00 |
|
Federico Builes
|
4366dbae42
|
Advisory filters should not drop entire dependencies.
|
2023-11-24 14:40:18 +01:00 |
|
Federico Builes
|
ded987cb3b
|
Downgrade usage of retries.
This commit reverts:
f7363549ac
76b050a607
8dc52cdbed
|
2023-11-08 08:35:44 +01:00 |
|
Federico Builes
|
8dc52cdbed
|
update tests
|
2023-10-09 11:23:53 +02:00 |
|
Justin Holguín
|
e81e6e582f
|
Default retry-on-snapshot-warnings to false
Keeping this true by default means wasting actions minutes for
the vast majority of DR users
|
2023-09-06 18:04:16 +00:00 |
|
Justin Holguín
|
ada103783f
|
Merge remote-tracking branch 'origin/retry-on-snapshot-warnings' into juxtin/dr-snaps-pre-launch
|
2023-08-31 16:31:44 +00:00 |
|
Sean Murphy
|
31afeba06d
|
Add unit tests
|
2023-08-09 21:10:48 -04:00 |
|
Sean Murphy
|
7ef37f3853
|
Merge branch 'main' into comment-on-failure
|
2023-08-09 17:31:16 -04:00 |
|
Adrien Pessu
|
1db9156f85
|
change from name of the package to the package url to avoid conflict between 2 dependencies with the same name but for different ecosystems
|
2023-08-08 16:34:23 +02:00 |
|
Adrien Pessu
|
00f1f5b642
|
add tests and docs
|
2023-08-07 14:07:46 +02:00 |
|
Adrien Pessu
|
6862f6f65f
|
add groups
|
2023-08-07 14:07:26 +02:00 |
|
Sean Murphy
|
902e86c6f5
|
Add on-failure option to comment-summary-in-pr setting
|
2023-08-04 22:37:51 -04:00 |
|
tgrall
|
13c4496f31
|
update doc
|
2023-06-14 09:12:19 +02:00 |
|
tgrall
|
0b053fccb4
|
add new parameter warn_only
|
2023-06-12 11:26:44 +02:00 |
|
Henri Maurer
|
66b6f67835
|
Add configs
|
2023-06-09 10:26:24 +01:00 |
|
Federico Builes
|
70f8094bec
|
adding a test for empty PURLs
|
2023-05-31 16:24:19 +02:00 |
|
Stefan Petrushevski
|
f1c8401a59
|
resolve merge conflicts
|
2023-05-30 18:04:26 +02:00 |
|
Stefan Petrushevski
|
7b5fa84cfc
|
added tests; docs and cleanup
|
2023-05-19 10:47:59 +02:00 |
|
Federico Builes
|
8938bd9ef0
|
Merge pull request #451 from actions/fix-external-config
Fix default values for fail-on-severity
|
2023-04-10 07:41:00 +02:00 |
|
Federico Builes
|
cebb5b1214
|
Don't use underscore for inline configs.
|
2023-04-06 21:33:24 +02:00 |
|
Federico Builes
|
3f6a17c81c
|
Update examples to use underscores instead of dashes.
|
2023-04-06 17:58:58 +02:00 |
|
Federico Builes
|
2c065db296
|
Add a test-helpers file.
|
2023-04-06 17:32:42 +02:00 |
|
Federico Builes
|
ff46a4b16e
|
Fixing failing test.
|
2023-04-06 17:11:29 +02:00 |
|
Federico Builes
|
153f274eb4
|
Mock octokit.
|
2023-04-06 17:11:16 +02:00 |
|
Federico Builes
|
0041d7fa41
|
Add a failing test.
|
2023-04-06 16:21:52 +02:00 |
|
Federico Builes
|
97c9465751
|
separate tests for external configs
|
2023-04-05 15:14:57 +02:00 |
|
Justin Holguín
|
76b8e83d1a
|
Use 'Unnamed Manifest' as catchall bucket
|
2023-03-28 16:06:07 +00:00 |
|