actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
NaN Commits 1 Branch 0 Tags
c45cbd720fc73d3afa92e33dedf0a5a7e88bb7c2
Commit Graph

102 Commits

Author SHA1 Message Date
Federico Builes
b39e17ba5e Replace pip -> pypi in PURL examples 2023-12-11 17:23:19 +01:00
Federico Builes
a93fa86c77 Fixing test name. 2023-11-28 08:08:29 +01:00
Federico Builes
4366dbae42 Advisory filters should not drop entire dependencies. 2023-11-24 14:40:18 +01:00
Federico Builes
ded987cb3b Downgrade usage of retries. 
This commit reverts:

f7363549ac
76b050a607
8dc52cdbed
 2023-11-08 08:35:44 +01:00
Federico Builes
8dc52cdbed update tests 2023-10-09 11:23:53 +02:00
Justin Holguín
e81e6e582f Default retry-on-snapshot-warnings to false 
Keeping this true by default means wasting actions minutes for
the vast majority of DR users
 2023-09-06 18:04:16 +00:00
Justin Holguín
ada103783f Merge remote-tracking branch 'origin/retry-on-snapshot-warnings' into juxtin/dr-snaps-pre-launch 2023-08-31 16:31:44 +00:00
Sean Murphy
31afeba06d Add unit tests 2023-08-09 21:10:48 -04:00
Sean Murphy
7ef37f3853 Merge branch 'main' into comment-on-failure 2023-08-09 17:31:16 -04:00
Adrien Pessu
1db9156f85 change from name of the package to the package url to avoid conflict between 2 dependencies with the same name but for different ecosystems 2023-08-08 16:34:23 +02:00
Adrien Pessu
00f1f5b642 add tests and docs 2023-08-07 14:07:46 +02:00
Adrien Pessu
6862f6f65f add groups 2023-08-07 14:07:26 +02:00
Sean Murphy
902e86c6f5 Add on-failure option to comment-summary-in-pr setting 2023-08-04 22:37:51 -04:00
Henri Maurer
66b6f67835 Add configs 2023-06-09 10:26:24 +01:00
Federico Builes
70f8094bec adding a test for empty PURLs 2023-05-31 16:24:19 +02:00
Stefan Petrushevski
f1c8401a59 resolve merge conflicts 2023-05-30 18:04:26 +02:00
Stefan Petrushevski
7b5fa84cfc added tests; docs and cleanup 2023-05-19 10:47:59 +02:00
Federico Builes
8938bd9ef0 Merge pull request #451 from actions/fix-external-config 
Fix default values for fail-on-severity
 2023-04-10 07:41:00 +02:00
Federico Builes
cebb5b1214 Don't use underscore for inline configs. 2023-04-06 21:33:24 +02:00
Federico Builes
3f6a17c81c Update examples to use underscores instead of dashes. 2023-04-06 17:58:58 +02:00
Federico Builes
2c065db296 Add a test-helpers file. 2023-04-06 17:32:42 +02:00
Federico Builes
ff46a4b16e Fixing failing test. 2023-04-06 17:11:29 +02:00
Federico Builes
153f274eb4 Mock octokit. 2023-04-06 17:11:16 +02:00
Federico Builes
0041d7fa41 Add a failing test. 2023-04-06 16:21:52 +02:00
Federico Builes
97c9465751 separate tests for external configs 2023-04-05 15:14:57 +02:00
Justin Holguín
76b8e83d1a Use 'Unnamed Manifest' as catchall bucket 2023-03-28 16:06:07 +00:00
Justin Holguín
7e1f7be1f6 Handle dependencies with an empty manifest field 
This happens sometimes with snapshots. We just want them to be displayed properly in the HTML output.
 2023-03-24 19:07:22 +00:00
David Losert
b7a25f4e9b Makes License Issues a single table per manifest 2023-03-02 07:43:23 +00:00
David Losert
1090cda9d5 Adjusts headlines and formatting for license issues 2023-02-28 12:28:20 +00:00
David Losert
b089c5b002 Adds conditional license summary 2023-02-28 11:08:39 +00:00
David Losert
6e66d136ec Reformats vulnerability section 2023-02-27 16:05:59 +00:00
David Losert
1b9faef957 Fixes ESLint to also incldue tests and fixes eslint errors in tests 2023-02-27 16:05:03 +00:00
David Losert
19ee172e7e feat: Adjusts the formatting and content for the status header 2023-02-22 14:05:52 +00:00
David Losert
1c85e9db8d Adds option to write summary into a pr comment 2023-02-16 10:03:16 +00:00
Chad Bentz
4b2cf01947 integration test to ensure RequestError catch 2023-01-05 17:22:27 +00:00
Josh Soref
cff3674e25 spelling: the 
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
 2022-12-08 11:04:05 -05:00
Federico Builes
b8e622f102 Move test out of failing block. 2022-11-15 22:33:31 +01:00
Federico Builes
93652d7af0 Fix failing tests. 2022-11-15 22:28:50 +01:00
Federico Builes
ba127cac5e Adding a test to confirm lists work properly in config files. 2022-11-15 22:25:26 +01:00
Federico Builes
1dd7392739 Adding fixture for testing config file string lists. 2022-11-15 22:25:13 +01:00
Federico Builes
c2097b2a9b Updating copy in a test. 2022-11-15 07:50:32 +01:00
cnagadya
336da03de2 Update empty allow-licenses tests 2022-11-08 11:15:36 +00:00
cnagadya
78565a954f Dont merge config lists 
Co-authored-by: Henri Maurer<hmaurer@github.com>
Co-authored-by: Federico Builes<febuiles@github.com>
 2022-11-08 10:52:30 +00:00
cnagadya
3c73a622ba Fix config-file tests 2022-11-08 09:53:36 +00:00
cnagadya
6d941b396a Fix inconsistencies due to zod defaults / partials mixup 2022-11-07 17:08:00 +00:00
cnagadya
b55cddb69d Use config-file for both remote and local config-files 2022-11-07 12:12:03 +00:00
cnagadya
dcdeb7de77 Remove redundant skips 
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-11-04 16:12:05 +00:00
cnagadya
b4a2fbfa16 Complete functionality for handling remote config file 2022-11-04 14:51:41 +00:00
Federico Builes
04f48dec81 Update __tests__/config.test.ts 2022-10-31 07:55:17 +01:00
Eric Cornelissen
c5af7ff272 Prevent disabling all checks 
Prevent users from disabling both the license and vulnerability check by
checking if both are set to `false` and throwing if that's the case.
 2022-10-28 22:08:55 +02:00