actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Replace packageurl-js with our own implementation

Browse Source
This commit is contained in:
Justin Holguín
2024-04-27 21:26:06 +00:00
committed by GitHub
parent 2034babb6b
commit 640617990f
16 changed files with 484 additions and 542 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/examples.md
+2 -2
View File
@@ -280,7 +280,7 @@ With the `deny-packages` option, you can exclude dependencies based on their PUR
Using the `deny-groups` option you can exclude dependencies by their group name/namespace. You can add multiple values separated by a comma.
In this example, we are excluding all versions of `pkg:maven/org.apache.logging.log4j:log4j-api` and only `2.23.0` of log4j-core `pkg:maven/org.apache.logging.log4j/[email protected]` from `maven` and all packages in the group `pkg:maven/com.bazaarvoice.maven`
In this example, we are excluding all versions of `pkg:maven/org.apache.logging.log4j:log4j-api` and only `2.23.0` of log4j-core `pkg:maven/org.apache.logging.log4j/[email protected]` from `maven` and all packages in the group `pkg:maven/com.bazaarvoice.maven/`
```yaml
name: 'Dependency Review'
@@ -300,7 +300,7 @@ jobs:
uses: actions/dependency-review-action@v4
with:
deny-packages: 'pkg:maven/org.apache.logging.log4j/log4j-api,pkg:maven/org.apache.logging.log4j/[email protected]'
deny-groups: 'pkg:maven/com.bazaarvoice.jolt'
deny-groups: 'pkg:maven/com.bazaarvoice.jolt/'
```
## Waiting for dependency submission jobs to complete