diff --git a/src/main.ts b/src/main.ts index f9419d3..0be8abb 100644 --- a/src/main.ts +++ b/src/main.ts @@ -125,7 +125,9 @@ async function run(): Promise { config.deny_groups ) - const scorecard = await getScorecardLevels(filteredChanges) + // generate informational scorecard entries for all added changes in the PR + const scorecardChanges = getScorecardChanges(changes) + const scorecard = await getScorecardLevels(scorecardChanges) const minSummary = summary.addSummaryToSummary( vulnerableChanges, @@ -369,7 +371,7 @@ function printScannedDependencies(changes: Changes): void { } function printDeniedDependencies( - changes: Change[], + changes: Changes, config: ConfigurationOptions ): void { core.group('Denied', async () => { @@ -384,6 +386,17 @@ function printDeniedDependencies( }) } +function getScorecardChanges(changes: Changes): Changes { + const out: Changes = [] + for (const change of changes) { + if (change.change_type === 'added') { + out.push(change) + } + } + + return out +} + async function createScorecardWarnings( scorecards: Scorecard, config: ConfigurationOptions