initial commit

src/config.ts

@@ -33,6 +33,7 @@ function readInlineConfig(): ConfigurationOptionsPartial {
   const allow_dependencies_licenses = parseList(
     getOptionalInput('allow-dependencies-licenses')
   )
+  const deny_list = parseList(getOptionalInput('deny-dependencies'))
   const allow_ghsas = parseList(getOptionalInput('allow-ghsas'))
   const license_check = getOptionalBoolean('license-check')
   const vulnerability_check = getOptionalBoolean('vulnerability-check')
@@ -49,6 +50,7 @@ function readInlineConfig(): ConfigurationOptionsPartial {
     fail_on_scopes,
     allow_licenses,
     deny_licenses,
+    deny_list,
     allow_dependencies_licenses,
     allow_ghsas,
     license_check,

src/main.ts

@@ -16,6 +16,7 @@ import {getRefs} from './git-refs'
 
 import {groupDependenciesByManifest} from './utils'
 import {commentPr} from './comment-pr'
+import {getDeniedChanges} from './denylist'
 
 async function run(): Promise<void> {
   try {
@@ -63,9 +64,15 @@ async function run(): Promise<void> {
       }
     )
 
+    const deniedChanges = await getDeniedChanges(
+      filteredChanges,
+      config.deny_list
+    )
+
     summary.addSummaryToSummary(
       vulnerableChanges,
       invalidLicenseChanges,
+      deniedChanges,
       config
     )
 

src/schemas.ts

@@ -42,6 +42,7 @@ export const ConfigurationOptionsSchema = z
     deny_licenses: z.array(z.string()).optional(),
     allow_dependencies_licenses: z.array(z.string()).optional(),
     allow_ghsas: z.array(z.string()).default([]),
+    deny_list: z.array(z.string()).default([]),
     license_check: z.boolean().default(true),
     vulnerability_check: z.boolean().default(true),
     config_file: z.string().optional(),

src/summary.ts

@@ -13,6 +13,7 @@ const icons = {
 export function addSummaryToSummary(
   vulnerableChanges: Changes,
   invalidLicenseChanges: InvalidLicenseChanges,
+  deniedChanges: Changes,
   config: ConfigurationOptions
 ): void {
   core.summary.addHeading('Dependency Review', 1)
@@ -34,6 +35,8 @@ export function addSummaryToSummary(
     return
   }
 
+  core.summary.addList(deniedChanges.map(change => `${change.name} is denied`))
+
   core.summary
     .addRaw('The following issues were found:')
     .addList([