actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
753 Commits 90 Branches 61 Tags
067e030d27b77e6afa6f0ccfc3d62f375140ecc7
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 6b47d2662b Merge pull request #333 from actions/dependabot/npm_and_yarn/got-12.5.3 
Bump got from 12.5.2 to 12.5.3
 2022-11-17 07:17:03 +01:00
Federico Builes 352f50a80e Update contribution instructions with v3 for easier copy/pasting. 2022-11-16 11:36:08 +01:00
Federico Builes 11310527b4 bumping version 2022-11-16 11:31:19 +01:00
Federico BuilesandGitHub ea0f46928b Merge pull request #330 from actions/errors-for-external-configs 
Improve error messages for external config files
 2022-11-16 11:26:15 +01:00
Federico Builes 369356e2e7 Fixing merge conflict in dist/ 
# Conflicts:
#	dist/index.js.map
 2022-11-16 11:24:44 +01:00
Federico BuilesandGitHub 136c0838bf Merge pull request #332 from actions/dependabot/npm_and_yarn/typescript-4.9.3 
Bump typescript from 4.8.4 to 4.9.3
 2022-11-16 07:04:34 +01:00
Federico Builes a952d7b1b7 adding dist 2022-11-15 22:34:15 +01:00
Federico Builes b8e622f102 Move test out of failing block. 2022-11-15 22:33:31 +01:00
Federico Builes ac059c649c Checkpoint! 2022-11-15 22:29:00 +01:00
Federico Builes 93652d7af0 Fix failing tests. 2022-11-15 22:28:50 +01:00
Federico Builes ba127cac5e Adding a test to confirm lists work properly in config files. 2022-11-15 22:25:26 +01:00
Federico Builes 1dd7392739 Adding fixture for testing config file string lists. 2022-11-15 22:25:13 +01:00
Federico Builes 2d265aa7cc Updating dist. 2022-11-15 07:50:53 +01:00
Federico Builes c57c602135 Force error casting to get messages! 2022-11-15 07:50:45 +01:00
Federico Builes c2097b2a9b Updating copy in a test. 2022-11-15 07:50:32 +01:00
Federico Builes 0a055a6a13 Improve error messages for external config files. 2022-11-15 07:45:29 +01:00
Federico BuilesandGitHub 3417e62ba2 Merge pull request #328 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.43.0 
Bump @typescript-eslint/parser from 5.42.1 to 5.43.0
 2022-11-15 05:38:42 +01:00
Federico BuilesandGitHub 173a4b8d96 Merge pull request #329 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.43.0 
Bump @typescript-eslint/eslint-plugin from 5.42.1 to 5.43.0
 2022-11-15 05:32:34 +01:00
Federico Builes 30d5821115 Bumping version number 2022-11-11 15:41:53 +01:00
Federico Builes 6e42c3395a Remove defaults from the recently added fields. 2022-11-11 15:19:46 +01:00
Federico BuilesandGitHub a3074cd699 Merge pull request #327 from actions/adding-extra-options 
Updating action.yml to include `*-check` config options
 2022-11-11 15:11:20 +01:00
Federico Builes 51a29d6960 Updating action.yml to include *-check config 
options.
 2022-11-11 14:56:07 +01:00
Federico BuilesandGitHub 235a221cf4 Merge pull request #324 from actions/readme-update 
Update the README
 2022-11-11 11:27:19 +01:00
Federico Builes 9b3a7f61dd Minor README tweaks. 2022-11-11 11:26:05 +01:00
Federico Builes a4761312ac Add pull_request to the list of events that don't need refs. 2022-11-11 11:23:46 +01:00
Federico Builes 28c7c8c314 Set the correct default for license-check in README. 2022-11-11 11:17:08 +01:00
Federico BuilesandGitHub 9da0fd4871 Merge pull request #325 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.5 
Bump eslint-plugin-jest from 27.1.4 to 27.1.5
 2022-11-11 09:00:04 +01:00
Federico BuilesandGitHub fe45fd6645 Merge pull request #326 from actions/dependabot/npm_and_yarn/esbuild-register-3.4.1 
Bump esbuild-register from 3.4.0 to 3.4.1
 2022-11-11 08:59:46 +01:00
Federico BuilesandGitHub 9e552623cc Merge pull request #323 from actions/dependabot/npm_and_yarn/esbuild-register-3.4.0 
Bump esbuild-register from 3.3.3 to 3.4.0
 2022-11-10 12:45:45 +01:00
Federico BuilesandGitHub 4108a15bd3 Merge pull request #306 from actions/external-repo-config 
Read configuration from external repositories
 2022-11-10 11:03:15 +01:00
Federico Builes 5ea8fbfb83 Update docs for config file paths. 2022-11-10 08:18:58 +01:00
Federico BuilesGitHubCourtney Claessens
 		c72eb06e71 Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:35 +01:00
Federico BuilesGitHubCourtney Claessens
 		aa409fa6cd Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:28 +01:00
Federico BuilesGitHubCourtney Claessens
 		5aaa78ce3c Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:15 +01:00
Federico Builes 59a4f4c4ba Fixing typo in README.md 2022-11-09 13:24:07 +01:00
Federico Builes bf8cfe8b38 Linting, adding dist files. 2022-11-09 13:22:33 +01:00
Federico Builes ae538ebe32 Linting and whitespace. Smol rename. 2022-11-09 13:17:12 +01:00
Federico Builes b4126ce983 Shuffle things around. 2022-11-09 13:16:53 +01:00
Federico Builes 418ae59d51 Replace TODO with instructions for getting PAT. 2022-11-08 17:51:31 +01:00
Federico Builes c38007a979 Don't abbreviate repo in docs. 
In general let's try not to use abbreviations in public
documentation.
 2022-11-08 17:45:23 +01:00
Federico BuilesandGitHub 7a42af0f2f Merge pull request #320 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.4 
Bump eslint-plugin-jest from 27.1.3 to 27.1.4
 2022-11-08 10:40:36 +01:00
Federico BuilesandGitHub 40e460b464 Merge pull request #316 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.1 
Bump @typescript-eslint/parser from 5.42.0 to 5.42.1
 2022-11-08 10:38:41 +01:00
Federico BuilesandGitHub 774bd6c1d5 Merge pull request #318 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.1 
Bump eslint-plugin-github from 4.4.0 to 4.4.1
 2022-11-08 10:37:41 +01:00
Federico BuilesandGitHub f7686f8c21 Merge pull request #317 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.1 
Bump @typescript-eslint/eslint-plugin from 5.42.0 to 5.42.1
 2022-11-08 10:36:16 +01:00
Federico BuilesandGitHub 7ce779229f Merge pull request #319 from actions/dependabot/npm_and_yarn/eslint-8.27.0 
Bump eslint from 8.26.0 to 8.27.0
 2022-11-08 08:34:38 +01:00
Federico BuilesandGitHub 683cbc4872 Merge branch 'main' into external-repo-config 2022-11-01 08:11:26 +01:00
Federico BuilesandGitHub 2f696d8c7a Merge pull request #314 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 
Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0
 2022-11-01 08:10:28 +01:00
Federico BuilesandGitHub ad6e320da1 Merge pull request #313 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.0 
Bump @typescript-eslint/parser from 5.41.0 to 5.42.0
 2022-11-01 08:09:22 +01:00
Federico BuilesandGitHub 10dc05ba09 Merge pull request #311 from ericcornelissen/308-disable-license-or-vuln 
Add `license-check` and `vulnerability-check` inputs
 2022-10-31 07:56:37 +01:00
Federico BuilesandGitHub 04f48dec81 Update __tests__/config.test.ts 2022-10-31 07:55:17 +01:00
Federico BuilesandGitHub bb5c0c7ca0 Merge pull request #312 from actions/dependabot/npm_and_yarn/types/node-16.18.3 
Bump @types/node from 16.18.2 to 16.18.3
 2022-10-31 06:42:09 +01:00
Federico BuilesandGitHub 2532504548 Merge pull request #310 from actions/cn/node-18 
Upgrade to Node 18
 2022-10-28 13:46:26 +02:00
Federico BuilesandGitHub fa62a0febc Merge pull request #294 from actions/cn/spdx-licenses 
Add support for SPDX expressions
 2022-10-28 11:27:18 +02:00
Federico BuilesandGitHub d6e28cdfae Merge pull request #307 from actions/dependabot/npm_and_yarn/types/node-16.18.2 
Bump @types/node from 16.18.0 to 16.18.2
 2022-10-27 07:34:11 +02:00
Federico BuilesandGitHub 024a5a6342 Merge pull request #305 from actions/dependabot/npm_and_yarn/octokit-2.0.10 
Bump octokit from 2.0.9 to 2.0.10
 2022-10-26 08:49:12 +02:00
Federico Builes b2fc686406 Resolving merge conflicts 2022-10-26 08:47:43 +02:00
Federico BuilesandGitHub cfef8bfe29 Merge pull request #304 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-4.0.3 
Bump @octokit/plugin-retry from 3.0.9 to 4.0.3
 2022-10-26 08:45:28 +02:00
Federico Builes bd43b8d1e2 updating dist 2022-10-26 08:45:18 +02:00
Federico BuilesandGitHub 65f9f50468 Merge pull request #303 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.41.0 
Bump @typescript-eslint/parser from 5.40.1 to 5.41.0
 2022-10-25 07:57:41 +02:00
Federico BuilesandGitHub 56163c5659 Merge pull request #302 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.41.0 
Bump @typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0
 2022-10-25 07:56:10 +02:00
Federico Builes 0efb1d1d84 bumping to 2.5.1 2022-10-24 17:03:38 +02:00
Federico BuilesandGitHub d4f6425aa4 Merge pull request #290 from actions/cn/scan_pr 
Enable setting configuration options for local testing
 2022-10-24 16:55:54 +02:00
Federico BuilesGitHubcnagadya
 		49a61bd9bd Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:54:03 +02:00
Federico BuilesGitHubcnagadya
 		06c01e11e8 Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:53:56 +02:00
Federico BuilesandGitHub 4538b29c27 Merge pull request #300 from actions/dependabot/npm_and_yarn/eslint-8.26.0 
Bump eslint from 8.25.0 to 8.26.0
 2022-10-24 07:14:08 +02:00
Federico BuilesandGitHub 4153ec555a Merge pull request #299 from actions/dependabot/npm_and_yarn/types/node-16.18.0 
Bump @types/node from 16.11.68 to 16.18.0
 2022-10-24 07:13:59 +02:00
Federico Builes 9760f87258 Fix config-file description in action.yml 2022-10-21 17:38:18 +02:00
Federico Builes 74c047086c Adding README and action.yml for external config files. 2022-10-21 17:34:20 +02:00
Federico Builes 80e573b784 Fixing whitespace. 2022-10-21 14:03:17 +02:00
Federico Builes b5c3d1e723 Update scan_pr to support loading an external config YAML file. 2022-10-21 14:00:52 +02:00
Federico Builes 7fd272118a Updating scan_pr to support a config file option. 2022-10-21 13:55:52 +02:00
Federico Builes 3c9a31f5a0 Updating CONTRIBUTING.md 2022-10-21 13:36:00 +02:00
Federico Builes d8fba3fdc1 Remove hardcode file from .gitignore 2022-10-21 13:33:24 +02:00
Federico Builes e805dd89e8 Merge branch 'main' into cn/scan_pr 2022-10-21 13:27:09 +02:00
Federico BuilesandGitHub 32276cb73d Merge pull request #298 from actions/dependabot/npm_and_yarn/types/node-16.11.68 
Bump @types/node from 16.11.66 to 16.11.68
 2022-10-19 07:49:08 +02:00
Federico BuilesandGitHub fe226ac019 Merge pull request #297 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.3 
Bump eslint-plugin-jest from 27.1.2 to 27.1.3
 2022-10-19 07:48:52 +02:00
Federico BuilesandGitHub 6f32cb0afd Merge pull request #296 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.1 
Bump @typescript-eslint/parser from 5.40.0 to 5.40.1
 2022-10-18 10:05:25 +02:00
Federico BuilesandGitHub a8b5c8c24e Merge pull request #295 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.1 
Bump @typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1
 2022-10-18 08:53:31 +02:00
Federico BuilesandGitHub 917e5af203 Merge pull request #291 from actions/dependabot/npm_and_yarn/types/node-16.11.66 
Bump @types/node from 16.11.65 to 16.11.66
 2022-10-17 07:28:53 +02:00
Federico BuilesandGitHub ba6dba6225 Merge pull request #292 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.2 
Bump eslint-plugin-jest from 27.1.1 to 27.1.2
 2022-10-17 07:26:25 +02:00
Federico BuilesandGitHub 0e5d083be1 Merge pull request #289 from actions/dependabot/npm_and_yarn/octokit-2.0.9 
Bump octokit from 2.0.7 to 2.0.9
 2022-10-14 09:09:30 +02:00
Federico Builes 2f428eec67 adding dist 2022-10-14 09:03:58 +02:00
Federico BuilesandGitHub 12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 
Bump @octokit/request-error from 3.0.1 to 3.0.2
 2022-10-14 08:55:30 +02:00
Federico BuilesandGitHub f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback 
Use GH Licenses API to retrieve null licenses
 2022-10-13 16:54:33 +02:00
Federico BuilesChristine NagadyaHenri Maurer
 		7e41a6f1ee Removing unnecessary beforeAll block 
Mocks are removed in Jest automatically due to our
Jest config file.

Co-authored-by: Christine Nagadya <[email protected]>
Co-authored-by: Henri Maurer <[email protected]>
 2022-10-13 16:52:54 +02:00
Federico BuilesandGitHub 0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 
Bump ansi-styles from 6.2.0 to 6.2.1
 2022-10-13 12:28:39 +02:00
Federico Builes 129f0ad973 adding dist 2022-10-13 12:26:58 +02:00
Federico BuilesandGitHub 18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 
Bump got from 12.5.1 to 12.5.2
 2022-10-13 08:12:07 +02:00
Federico BuilesandGitHub 94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 
Bump eslint-plugin-github from 4.3.7 to 4.4.0
 2022-10-12 08:05:50 +02:00
Federico BuilesandGitHub 577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 
Bump ansi-styles from 6.1.1 to 6.2.0
 2022-10-12 08:02:05 +02:00
Federico Builes 9ce6cb532b adding dist 2022-10-12 08:01:53 +02:00
Federico BuilesandGitHub f076f221f4 Merge pull request #280 from actions/format-bugs 
Fix display issues with versions and GHSAs
 2022-10-11 15:22:44 +02:00
Federico Builes 88b817ec8d adding dist 2022-10-11 15:20:02 +02:00
Federico BuilesandChristine Nagadya 2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <[email protected]>
 2022-10-11 15:17:34 +02:00
Federico Builes 1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes f632f5f79d adding dist 2022-10-11 14:51:27 +02:00
Federico Builes ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico BuilesandGitHub 6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 
Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0
 2022-10-11 12:11:26 +02:00
Federico BuilesandGitHub 5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 
Bump @typescript-eslint/parser from 5.39.0 to 5.40.0
 2022-10-11 12:09:15 +02:00
Federico BuilesandGitHub 463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 
Bump @types/node from 16.11.64 to 16.11.65
 2022-10-11 10:50:05 +02:00