actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,639 Commits 1 Branch 0 Tags
f38966fbec3981afd884ececf78ff29add418611
Commit Graph

1639 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Anne-Marie
f38966fbec updating overview 2024-05-23 10:26:42 +00:00
Anne-Marie
9eb0dccbc9 editing configuration and remaining sections 2024-05-23 10:03:57 +00:00
Anne-Marie
258a2295c6 installation section 2024-05-23 09:37:47 +00:00
Anne-Marie
4c0a483c95 Update README.md 2024-05-23 10:22:01 +02:00
Eli Reisman
339e2e1bfc Merge pull request #741 from josieang/deps-dev-v3 
use the v3 version of the deps.dev API
 2024-05-10 14:23:17 -07:00
Josie Anugerah
40cd879447 npm install && npm run build && npm run package 2024-05-07 08:11:58 +10:00
Josie Anugerah
d11eeb39d8 Merge branch 'main' into deps-dev-v3 2024-05-06 17:26:48 +10:00
Justin Holguín
82ab8f69c7 Merge pull request #765 from actions/juxtin/allow-slashes-in-purls 
Allow slashes in purl package names
 2024-05-02 13:30:20 -07:00
Justin Holguín
432d8e7efe Allow slashes in purl package names 2024-05-02 19:11:08 +00:00
Justin Holguín
0c155c5e85 Merge pull request #762 from actions/juxtin/prepare-4.3.2 
Update version number to 4.3.2
 2024-04-30 09:39:04 -07:00
Justin Holguín
f3dac32d35 Merge pull request #761 from actions/juxtin/fix-allow-dependencies-licenses 
Fix package-url parsing for allow-dependencies-licenses
 2024-04-30 09:38:44 -07:00
Justin Holguín
d0d5cc3ec4 Update version number to 4.3.2 2024-04-30 16:30:51 +00:00
Justin Holguín
49fbbe0acb Fix package-url parsing for allow-dependencies-licenses 2024-04-29 23:24:15 +00:00
Justin Holguín
e58c696e52 Merge pull request #758 from actions/juxtin/prepare-4.3.1 
Change version to 4.3.1
 2024-04-29 10:48:18 -07:00
Justin Holguín
9b7c72ddcd Change version to 4.3.1 2024-04-29 17:45:21 +00:00
Justin Holguín
7dcfabfea2 Merge pull request #753 from actions/juxtin/debug-purl 
Parse purls cautiously in getDeniedChanges
 2024-04-29 10:43:30 -07:00
Justin Holguín
5f0808ffb1 Validate that deny-packages purls are complete 2024-04-29 16:46:21 +00:00
Justin Holguín
fcc66c23b3 Refine purl parsing and tests 2024-04-28 20:33:37 +00:00
Justin Holguín
1dd418bcb3 Basic tests for PURL validation in config 2024-04-27 22:16:46 +00:00
Justin Holguín
640617990f Replace packageurl-js with our own implementation 2024-04-27 21:26:06 +00:00
Justin Holguín
2034babb6b Bypass purls (mostly) for deny checks 2024-04-26 23:17:11 +00:00
Justin Holguín
7e773b1e98 Log offending purl 2024-04-26 21:50:12 +00:00
Justin Holguín
a3460920cc Parse purls cautiously in getDeniedChanges 2024-04-26 21:28:24 +00:00
Justin Holguín
0659a74c94 Merge pull request #751 from actions/juxtin/release 
Update version to 4.3.0 in preparation for release
 2024-04-26 10:26:45 -07:00
Justin Holguín
28facf5722 Update release instructions 2024-04-26 17:11:57 +00:00
Justin Holguín
5ab7b74146 Update package-lock.json 2024-04-26 17:11:46 +00:00
Josie Anugerah
2a28e93881 Merge branch 'main' into deps-dev-v3 2024-04-26 14:10:34 +10:00
Justin Holguín
95b6fa4e6b Update version to 4.3.0 2024-04-25 22:41:44 +00:00
Brandon Teng
2dba7fdde1 Merge pull request #733 from actions/deny-list-version 
deny-packages configuration option can deny specified version or all packages
 2024-04-24 20:38:16 -05:00
Brandon Teng
7d44c7c392 building package with latest typescript version 2024-04-24 20:36:47 -05:00
Brandon Teng
ce31ee8325 Merge branch 'main' into deny-list-version 2024-04-24 18:16:35 -05:00
Justin Holguín
df1b3661fd Merge pull request #750 from actions/juxtin/fix-deny-icon 
Show denied packages with red X
 2024-04-24 15:37:25 -07:00
Brandon Teng
71c57a6108 Merge branch 'main' into deny-list-version 2024-04-24 17:19:53 -05:00
Justin Holguín
7e2c3c347b Show denied packages with red X 2024-04-24 22:11:24 +00:00
Justin Holguín
f456418f6a Merge pull request #737 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.2 
Bump eslint-plugin-github from 4.10.1 to 4.10.2
 2024-04-24 14:59:31 -07:00
Justin Holguín
19bd35e07b Merge pull request #744 from actions/dependabot/npm_and_yarn/typescript-5.4.5 
Bump typescript from 5.3.3 to 5.4.5
 2024-04-24 14:57:23 -07:00
Justin Holguín
ff97293707 Update dist 2024-04-24 21:55:26 +00:00
dependabot[bot]
5498b6c4c3 Bump typescript from 5.3.3 to 5.4.5 
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.3.3 to 5.4.5.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.3.3...v5.4.5)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-24 21:39:33 +00:00
Brandon Teng
80116a4564 Merge branch 'main' into deny-list-version 2024-04-24 16:35:05 -05:00
Justin Holguín
68488bcecb Merge pull request #748 from actions/issue-738 
Fix extra https:// in summary
 2024-04-24 13:54:40 -07:00
Justin Hutchings
16a0212a77 Build source 2024-04-23 17:31:55 +00:00
Justin Hutchings
6d3fba9bf2 Remove extra https:// 2024-04-23 17:26:55 +00:00
Josie Anugerah
671683931a run npm run all 2024-04-17 13:31:49 -07:00
Brandon Teng
c6cc8585a0 building and packaging action 2024-04-16 16:25:58 -05:00
Brandon Teng
c32a0148b3 throwing parsing error up instead of swallowing it 2024-04-16 16:25:28 -05:00
Brandon Teng
67d0214607 simplifying tests 2024-04-16 16:04:25 -05:00
Brandon Teng
3ca15314ff transforming package URLs during zod parsing 2024-04-16 16:04:11 -05:00
Brandon Teng
a318e62c6c using packageurl-js to parse packages and groups from config 2024-04-16 12:44:51 -05:00
Josie Anugerah
b0986c2fe0 use the v3 version of the deps.dev API 2024-04-09 16:11:32 +10:00
Brandon Teng
061f471b83 updating docs 2024-04-04 15:48:24 -05:00