building and packaging action

dist/index.js

@@ -179,31 +179,30 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.getDeniedChanges = void 0;
 const core = __importStar(__nccwpck_require__(2186));
-function getDeniedChanges(changes, deniedPackages, deniedGroups) {
+function getDeniedChanges(changes, deniedPackages = [], deniedGroups = []) {
     return __awaiter(this, void 0, void 0, function* () {
         const changesDenied = [];
-        let failed = false;
+        let hasDeniedPackage = false;
         for (const change of changes) {
-            change.name = change.name.toLowerCase();
+            const [packageName, packageVersion] = change.package_url
-            const packageUrl = change.package_url.toLowerCase().split('@')[0];
+                .toLowerCase()
-            if (deniedPackages) {
+                .split('@');
-                for (const denied of deniedPackages) {
+            for (const denied of deniedPackages) {
-                    if (packageUrl === denied.split('@')[0].toLowerCase()) {
+                const [deniedName, deniedVersion] = denied.toLowerCase().split('@');
-                        changesDenied.push(change);
+                if ((!deniedVersion || packageVersion === deniedVersion) &&
-                        failed = true;
+                    packageName === deniedName) {
-                    }
+                    changesDenied.push(change);
+                    hasDeniedPackage = true;
                 }
             }
-            if (deniedGroups) {
+            for (const denied of deniedGroups) {
-                for (const denied of deniedGroups) {
+                if (packageName.startsWith(denied.toLowerCase())) {
-                    if (packageUrl.startsWith(denied.toLowerCase())) {
+                    changesDenied.push(change);
-                        changesDenied.push(change);
+                    hasDeniedPackage = true;
-                        failed = true;
-                    }
                 }
             }
         }
-        if (failed) {
+        if (hasDeniedPackage) {
             core.setFailed('Dependency review detected denied packages.');
         }
         else {