4f5a06217d
Remove examples
...
As not confirmed they are correct.
For example PIp doesn't work but Python does
2025-06-12 12:23:38 +01:00
81fde650c2
Add new input to readme
2025-06-12 12:10:17 +01:00
786fb5fe93
dist generated code
2025-06-12 12:10:06 +01:00
550b6f27ed
Pass detectorCategories
...
As we want to use for specific ecosystems.
2025-06-12 12:09:54 +01:00
07208f2876
Merge pull request #116 from advanced-security/dist_update
...
Update binary files for index.js and index.js.map
2025-05-27 13:27:12 +01:00
67d05b822a
Update binary files for index.js and index.js.map
2025-05-27 11:17:44 +00:00
2aa140be93
Merge pull request #113 from advanced-security/dependabot/npm_and_yarn/npm_and_yarn-87115a91ec
...
Bump undici from 5.28.5 to 5.29.0 in the npm_and_yarn group
2025-05-27 12:55:59 +02:00
e4fe0062c4
Bump undici from 5.28.5 to 5.29.0 in the npm_and_yarn group
...
Bumps the npm_and_yarn group with 1 update: [undici](https://github.com/nodejs/undici ).
Updates `undici` from 5.28.5 to 5.29.0
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-15 16:35:16 +00:00
1874d0f72d
Merge pull request #109 from advanced-security/feature/handle-null-purls
...
Improve missing package URL handling
2025-05-14 14:14:21 -04:00
4a59086e33
Merge branch 'main' into feature/handle-null-purls
2025-05-13 14:27:43 -04:00
3805c51da5
Merge pull request #105 from advanced-security/dependabot/github_actions/actions-dependencies-37cd5763f6
...
Bump actions/setup-node from 4.2.0 to 4.4.0 in the actions-dependencies group
2025-05-13 09:18:05 +01:00
1a821e1ee2
Merge branch 'main' into dependabot/github_actions/actions-dependencies-37cd5763f6
2025-05-13 09:12:58 +01:00
67962323ba
Merge pull request #112 from advanced-security/alert-autofix-workflow-permissions
...
Potential fix for alerts: Workflow does not contain permissions
2025-05-13 09:12:03 +01:00
73e1388139
Validate packageUrlJson structure in makePackageUrl method
2025-05-12 22:25:29 +00:00
47ec470b21
Refactor tests
2025-05-12 22:05:43 +00:00
203f6e5c2e
Update componentDetection.test.ts
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-12 17:39:26 -04:00
3f82ca7921
Update componentDetection.test.ts
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-12 17:39:18 -04:00
fcd2c805ee
Update componentDetection.test.ts
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-12 17:35:43 -04:00
7cfdb92164
Potential fix for code scanning alert no. 11: Workflow does not contain permissions
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-05-12 17:30:29 -04:00
7eebd4d574
Potential fix for code scanning alert no. 12: Workflow does not contain permissions
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-05-12 17:29:23 -04:00
b69d2d201b
Add tests
2025-05-12 21:08:26 +00:00
5840bc427c
Update index.js.map with new build output
2025-05-12 20:05:44 +00:00
0b3ad66ec5
Merge remote-tracking branch 'origin/main' into feature/handle-null-purls
2025-05-12 20:03:12 +00:00
6a1035d837
Merge pull request #111 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-e202d7757e
...
Bump the npm-dependencies group across 1 directory with 9 updates
2025-05-12 15:49:21 -04:00
2c2e919e21
Fix eslint ... v9 upgrade broke!
2025-05-12 17:14:48 +00:00
31789e4b4b
Enable full ESM support for Node 20+ and modern dependencies, update Jest and build output configuration
...
- Set "type": "module" in package.json to enable ESM throughout the project.
- Changed "main" in package.json to "dist/index.js" to point to the bundled output generated by ncc.
- Updated Jest configuration (jest.config.js) to ESM format and to use babel-jest for TypeScript transformation.
- Added/updated babel.config.js in ESM format to support TypeScript and ESM for Jest.
- Ensured test scripts use NODE_OPTIONS=--experimental-vm-modules for Jest ESM compatibility.
2025-05-12 17:09:08 +00:00
9d2bd043b0
Bump the npm-dependencies group across 1 directory with 9 updates
...
Bumps the npm-dependencies group with 9 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github ) | `6.0.0` | `6.0.1` |
| [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit ) | `2.0.4` | `2.0.5` |
| [dotenv](https://github.com/motdotla/dotenv ) | `16.4.7` | `16.5.0` |
| [octokit](https://github.com/octokit/octokit.js ) | `4.1.2` | `4.1.3` |
| [yaml](https://github.com/eemeli/yaml ) | `2.7.0` | `2.7.1` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env ) | `7.26.9` | `7.27.2` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript ) | `7.26.0` | `7.27.1` |
| [eslint](https://github.com/eslint/eslint ) | `9.21.0` | `9.26.0` |
| [ts-jest](https://github.com/kulshekhar/ts-jest ) | `29.2.6` | `29.3.2` |
Updates `@actions/github` from 6.0.0 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github )
Updates `@github/dependency-submission-toolkit` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases )
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v2.0.4...v2.0.5 )
Updates `dotenv` from 16.4.7 to 16.5.0
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md )
- [Commits](https://github.com/motdotla/dotenv/compare/v16.4.7...v16.5.0 )
Updates `octokit` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/octokit/octokit.js/releases )
- [Commits](https://github.com/octokit/octokit.js/compare/v4.1.2...v4.1.3 )
Updates `yaml` from 2.7.0 to 2.7.1
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v2.7.0...v2.7.1 )
Updates `@babel/preset-env` from 7.26.9 to 7.27.2
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.27.2/packages/babel-preset-env )
Updates `@babel/preset-typescript` from 7.26.0 to 7.27.1
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-preset-typescript )
Updates `eslint` from 9.21.0 to 9.26.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/compare/v9.21.0...v9.26.0 )
Updates `ts-jest` from 29.2.6 to 29.3.2
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.6...v29.3.2 )
---
updated-dependencies:
- dependency-name: "@actions/github"
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@github/dependency-submission-toolkit"
dependency-version: 2.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: dotenv
dependency-version: 16.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: octokit
dependency-version: 4.1.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: yaml
dependency-version: 2.7.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: "@babel/preset-env"
dependency-version: 7.27.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@babel/preset-typescript"
dependency-version: 7.27.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: eslint
dependency-version: 9.26.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: ts-jest
dependency-version: 29.3.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-12 13:14:27 +00:00
977f836c74
Compile change
2025-05-09 05:39:06 +00:00
ce6986e485
comments
2025-05-09 05:34:00 +00:00
6cf906749f
Improve package URL validation and skip components with invalid URLs
2025-05-09 05:25:36 +00:00
5cef7e77dc
Add debug logging for missing packageUrl and improve package URL handling
2025-05-09 05:15:48 +00:00
66493a2f02
Bump actions/setup-node in the actions-dependencies group
...
Bumps the actions-dependencies group with 1 update: [actions/setup-node](https://github.com/actions/setup-node ).
Updates `actions/setup-node` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.2.0...v4.4.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-14 13:05:25 +00:00
7f8a022063
Installed packages for node20
2025-04-07 17:14:09 +01:00
98544e57ff
Bumped to node20
2025-04-07 17:11:32 +01:00
0392894454
Merge pull request #103 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-b4b4d8a9d0
...
Bump the npm_and_yarn group across 1 directory with 5 updates
2025-04-07 17:09:27 +01:00
fb5132e101
Bump the npm_and_yarn group across 1 directory with 5 updates
...
Bumps the npm_and_yarn group with 3 updates in the /test directory: [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js ), [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github ) and [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit ).
Updates `@octokit/plugin-paginate-rest` from 2.21.3 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases )
- [Commits](https://github.com/octokit/plugin-paginate-rest.js/compare/v2.21.3...v9.2.2 )
Updates `@actions/github` from 5.1.1 to 6.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github )
Updates `@github/dependency-submission-toolkit` from 1.2.7 to 2.0.5
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases )
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.7...v2.0.5 )
Updates `@octokit/request` from 5.6.3 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases )
- [Commits](https://github.com/octokit/request.js/compare/v5.6.3...v8.4.1 )
Updates `@octokit/request-error` from 2.1.0 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases )
- [Commits](https://github.com/octokit/request-error.js/compare/v2.1.0...v5.1.1 )
---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
dependency-version: 9.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: "@actions/github"
dependency-version: 6.0.0
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: "@github/dependency-submission-toolkit"
dependency-version: 2.0.5
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
dependency-version: 8.4.1
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
dependency-version: 5.1.1
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-07 16:09:14 +00:00
0e8665d741
Merge pull request #92 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-c15c2592f9
...
Bump the npm_and_yarn group across 1 directory with 2 updates
2025-04-07 17:07:22 +01:00
b3c6d48d63
Merge pull request #93 from advanced-security/dependabot/npm_and_yarn/npm_and_yarn-c15c2592f9
...
Bump the npm_and_yarn group with 2 updates
2025-04-07 17:06:43 +01:00
d5ba02889a
Merge pull request #95 from advanced-security/dependabot/github_actions/actions-dependencies-c2de478214
...
Bump actions/setup-node from 4.1.0 to 4.2.0 in the actions-dependencies group
2025-04-07 17:04:19 +01:00
c8c9e921a9
Merge pull request #98 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-1b2666c53e
...
Bump the npm-dependencies group across 1 directory with 13 updates
2025-04-07 17:03:56 +01:00
4c4b8a2d01
Merge pull request #102 from gitulisca-enterprise-cloud-testing/gitulisca/add-correlator-action-input
...
Add snapshot correlator action input
2025-04-07 14:55:41 +01:00
9abe52af77
Increase test 'Runs CLI' jestjs timeout
2025-04-07 10:39:02 +00:00
36f75d5c4d
Merge branch 'advanced-security:main' into gitulisca/add-correlator-action-input
2025-04-07 12:05:27 +10:00
5429d60d7d
Merge pull request #101 from advanced-security/remove-the-workflow-not-the-conf
...
Remove the workflow not the config
2025-04-04 13:26:31 +01:00
024fc8bf58
Remove the workflow not the config
2025-04-04 11:23:32 +00:00
f30e591ac3
Merge pull request #100 from advanced-security/brrygrdn/remove-codeql-config
...
Remove CodeQL config since we use Default Setup
2025-04-04 11:38:44 +01:00
c71cfb58d3
Remove CodeQL config since we use Default Setup
2025-04-04 10:11:35 +00:00
fb88c2d3ea
Add snapshot correlator action input
2025-04-03 05:21:10 +00:00
ff9ee49630
Bump the npm-dependencies group across 1 directory with 13 updates
...
Bumps the npm-dependencies group with 13 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github ) | `5.1.1` | `6.0.0` |
| [cross-fetch](https://github.com/lquixada/cross-fetch ) | `3.1.5` | `4.1.0` |
| [dotenv](https://github.com/motdotla/dotenv ) | `16.0.3` | `16.4.7` |
| [octokit](https://github.com/octokit/octokit.js ) | `4.0.2` | `4.1.2` |
| [tar](https://github.com/isaacs/node-tar ) | `6.2.1` | `7.4.3` |
| [yaml](https://github.com/eemeli/yaml ) | `2.2.2` | `2.7.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env ) | `7.25.4` | `7.26.9` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript ) | `7.24.7` | `7.26.0` |
| [@vercel/ncc](https://github.com/vercel/ncc ) | `0.36.1` | `0.38.3` |
| [eslint](https://github.com/eslint/eslint ) | `8.46.0` | `9.21.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ) | `29.5.0` | `29.7.0` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ) | `29.5.1` | `29.5.14` |
| [ts-jest](https://github.com/kulshekhar/ts-jest ) | `29.1.0` | `29.2.6` |
Updates `@actions/github` from 5.1.1 to 6.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github )
Updates `cross-fetch` from 3.1.5 to 4.1.0
- [Release notes](https://github.com/lquixada/cross-fetch/releases )
- [Changelog](https://github.com/lquixada/cross-fetch/blob/v4.x/CHANGELOG.md )
- [Commits](https://github.com/lquixada/cross-fetch/compare/v3.1.5...v4.1.0 )
Updates `dotenv` from 16.0.3 to 16.4.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md )
- [Commits](https://github.com/motdotla/dotenv/compare/v16.0.3...v16.4.7 )
Updates `octokit` from 4.0.2 to 4.1.2
- [Release notes](https://github.com/octokit/octokit.js/releases )
- [Commits](https://github.com/octokit/octokit.js/compare/v4.0.2...v4.1.2 )
Updates `tar` from 6.2.1 to 7.4.3
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.1...v7.4.3 )
Updates `yaml` from 2.2.2 to 2.7.0
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.2...v2.7.0 )
Updates `@babel/preset-env` from 7.25.4 to 7.26.9
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.26.9/packages/babel-preset-env )
Updates `@babel/preset-typescript` from 7.24.7 to 7.26.0
- [Release notes](https://github.com/babel/babel/releases )
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md )
- [Commits](https://github.com/babel/babel/commits/v7.26.0/packages/babel-preset-typescript )
Updates `@vercel/ncc` from 0.36.1 to 0.38.3
- [Release notes](https://github.com/vercel/ncc/releases )
- [Commits](https://github.com/vercel/ncc/compare/0.36.1...0.38.3 )
Updates `eslint` from 8.46.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/compare/v8.46.0...v9.21.0 )
Updates `jest` from 29.5.0 to 29.7.0
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v29.7.0/packages/jest )
Updates `@types/jest` from 29.5.1 to 29.5.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
Updates `ts-jest` from 29.1.0 to 29.2.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.0...v29.2.6 )
---
updated-dependencies:
- dependency-name: "@actions/github"
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: npm-dependencies
- dependency-name: cross-fetch
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: npm-dependencies
- dependency-name: dotenv
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: octokit
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: tar
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: npm-dependencies
- dependency-name: yaml
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@babel/preset-env"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@babel/preset-typescript"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@vercel/ncc"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: eslint
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: npm-dependencies
- dependency-name: jest
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
- dependency-name: "@types/jest"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-dependencies
- dependency-name: ts-jest
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-24 17:57:20 +00:00
a0c82b9f57
Bump actions/setup-node in the actions-dependencies group
...
Bumps the actions-dependencies group with 1 update: [actions/setup-node](https://github.com/actions/setup-node ).
Updates `actions/setup-node` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.1.0...v4.2.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-27 13:45:02 +00:00
Lewis Jones