actions/component-detection-dependency-submission-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
367 Commits 50 Branches 0 Tags
b876b8cc341a53970394b33ea0ca4e86c25542de
Commit Graph
44 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Chad Bentz 630165e704 Merge pull request #161 from advanced-security/document-EnableIfDefaultOff-detectorArgs 
Revise README for workflows and detector options
 2026-02-02 13:53:01 -05:00
Chad Bentz 332c61add4 Merge pull request #159 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-c2faeb1381 
Bump tar from 7.5.4 to 7.5.7 in /test in the npm_and_yarn group across 1 directory
 2026-02-02 10:56:59 -05:00
Chad Bentz 933761652d Merge pull request #162 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-304c371dc4 
Bump the npm-dependencies group with 4 updates
 2026-02-02 10:52:42 -05:00
Chad Bentz 9aece0e09c Merge pull request #163 from advanced-security/copilot/sub-pr-162 
Fix ESM compatibility for @actions/core v3 and @actions/github v9
 2026-02-02 10:41:47 -05:00
Chad Bentz d177d7847a Update README to remove duplication and version change 
fix formatting and typo
 2026-01-29 15:20:14 -05:00
Chad Bentz d041cfd4c5 Revise README for workflows and detector options 
Updated example workflow section and added details about experimental and default-off detectors that are passed into detectorArgs as EnableIfDefaultOff
 2026-01-29 15:17:59 -05:00
Chad Bentz 8270e9ad5f Merge pull request #158 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-1c5b4d3897 
Bump tar from 7.5.4 to 7.5.6 in the npm-dependencies group
 2026-01-26 09:45:44 -05:00
Chad Bentz 65d132c09c Merge pull request #157 from advanced-security/dependabot/npm_and_yarn/test/nested/npm_and_yarn-f3562b46b9 
Bump lodash from 4.17.21 to 4.17.23 in /test/nested in the npm_and_yarn group across 1 directory
 2026-01-23 16:52:45 -05:00
Chad Bentz 79573619af Merge pull request #156 from advanced-security/latest-version-readme 
Update component detection action version to 0.1.1
 2026-01-21 16:27:54 -05:00
Chad Bentz 32fc958bc4 Update component detection action version to 0.1.1 2026-01-21 16:27:04 -05:00
Chad Bentz 9c110eb34d Merge pull request #155 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-a17bed1a3b 
Bump tar from 7.5.3 to 7.5.4 in /test in the npm_and_yarn group across 1 directory
 2026-01-21 16:20:23 -05:00
Chad Bentz fe416ae93b Merge pull request #154 from advanced-security/dependabot/npm_and_yarn/tar-7.5.4 
Bump tar from 7.5.3 to 7.5.4
 2026-01-21 16:20:12 -05:00
Chad Bentz 386aa5c154 Merge pull request #152 from advanced-security/dependabot/github_actions/actions-dependencies-b584cbb28a 
Bump the actions-dependencies group with 2 updates
 2026-01-19 12:15:31 -05:00
Chad Bentz 7422d90ed9 Merge pull request #153 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-37dcccbec2 
Bump @babel/preset-env from 7.28.5 to 7.28.6 in the npm-dependencies group
 2026-01-19 12:13:28 -05:00
Chad Bentz 12d34de864 Merge pull request #151 from advanced-security/dependabot/npm_and_yarn/tar-7.5.3 
Bump tar from 7.5.2 to 7.5.3
 2026-01-16 16:50:29 -05:00
Chad Bentz ea95fe51c8 Merge pull request #150 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-bb754c2437 
Bump tar from 6.2.1 to 7.5.3 in /test in the npm_and_yarn group across 1 directory
 2026-01-16 16:48:32 -05:00
Chad Bentz bbaabfd2f9 Merge pull request #148 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-a0793ff638 
Bump the npm-dependencies group across 1 directory with 6 updates
 2026-01-12 22:47:35 -05:00
Chad Bentz 130f5c0c4b Merge pull request #149 from advanced-security/copilot/sub-pr-148 
Fix build failure from deprecated @types/glob package
 2026-01-12 14:00:24 -05:00
Chad Bentz 1874d0f72d Merge pull request #109 from advanced-security/feature/handle-null-purls 
Improve missing package URL handling
 2025-05-14 14:14:21 -04:00
Chad Bentz 4a59086e33 Merge branch 'main' into feature/handle-null-purls 2025-05-13 14:27:43 -04:00
Chad Bentz 73e1388139 Validate packageUrlJson structure in makePackageUrl method 2025-05-12 22:25:29 +00:00
Chad Bentz 47ec470b21 Refactor tests 2025-05-12 22:05:43 +00:00
Chad BentzandCopilot 203f6e5c2e Update componentDetection.test.ts 
Co-authored-by: Copilot <[email protected]>
 2025-05-12 17:39:26 -04:00
Chad BentzandCopilot 3f82ca7921 Update componentDetection.test.ts 
Co-authored-by: Copilot <[email protected]>
 2025-05-12 17:39:18 -04:00
Chad BentzandCopilot fcd2c805ee Update componentDetection.test.ts 
Co-authored-by: Copilot <[email protected]>
 2025-05-12 17:35:43 -04:00
Chad BentzandCopilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> 7cfdb92164 Potential fix for code scanning alert no. 11: Workflow does not contain permissions 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2025-05-12 17:30:29 -04:00
Chad BentzandCopilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> 7eebd4d574 Potential fix for code scanning alert no. 12: Workflow does not contain permissions 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2025-05-12 17:29:23 -04:00
Chad Bentz b69d2d201b Add tests 2025-05-12 21:08:26 +00:00
Chad Bentz 5840bc427c Update index.js.map with new build output 2025-05-12 20:05:44 +00:00
Chad Bentz 0b3ad66ec5 Merge remote-tracking branch 'origin/main' into feature/handle-null-purls 2025-05-12 20:03:12 +00:00
Chad Bentz 6a1035d837 Merge pull request #111 from advanced-security/dependabot/npm_and_yarn/npm-dependencies-e202d7757e 
Bump the npm-dependencies group across 1 directory with 9 updates
 2025-05-12 15:49:21 -04:00
Chad Bentz 2c2e919e21 Fix eslint ... v9 upgrade broke! 2025-05-12 17:14:48 +00:00
Chad Bentz 31789e4b4b Enable full ESM support for Node 20+ and modern dependencies, update Jest and build output configuration 
- Set "type": "module" in package.json to enable ESM throughout the project.
- Changed "main" in package.json to "dist/index.js" to point to the bundled output generated by ncc.
- Updated Jest configuration (jest.config.js) to ESM format and to use babel-jest for TypeScript transformation.
- Added/updated babel.config.js in ESM format to support TypeScript and ESM for Jest.
- Ensured test scripts use NODE_OPTIONS=--experimental-vm-modules for Jest ESM compatibility.
 2025-05-12 17:09:08 +00:00
Chad Bentz 977f836c74 Compile change 2025-05-09 05:39:06 +00:00
Chad Bentz ce6986e485 comments 2025-05-09 05:34:00 +00:00
Chad Bentz 6cf906749f Improve package URL validation and skip components with invalid URLs 2025-05-09 05:25:36 +00:00
Chad Bentz 5cef7e77dc Add debug logging for missing packageUrl and improve package URL handling 2025-05-09 05:15:48 +00:00
Chad Bentz 2a225a4eaf Readme to v0.0.2 2023-05-12 14:48:18 -04:00
Chad Bentz 9b5bb33c5e run prepare on non windows machine 2023-05-08 10:19:21 -04:00
Chad Bentz cdeac4436f npm run prepare 2023-05-05 00:47:37 -04:00
Chad Bentz eea402190d Merge pull request #1 from felickz/windows 
Windows
 2023-05-05 00:25:34 -04:00
Chad Bentz 8a403ce453 add debug logs 2023-05-05 00:21:28 -04:00
Chad Bentz df3fb46172 set proper path to exe on win 2023-05-05 00:03:32 -04:00
Chad Bentz 6dc027ab22 Detect OS when installing 2023-05-04 22:57:27 -04:00