Eli Reisman
2e4eaa490e
complete test suite conversions; simplify fn name
2024-06-10 09:51:00 -07:00
Eli Reisman
ecd706f525
register spdx lib as ES Module, start converting call sites to use new spdx pkg - TODO: update tests
2024-06-10 09:51:00 -07:00
Justin Holguín and GitHub
49fbbe0acb
Fix package-url parsing for allow-dependencies-licenses
2024-04-29 23:24:15 +00:00
Justin Holguín and GitHub
640617990f
Replace packageurl-js with our own implementation
2024-04-27 21:26:06 +00:00
Justin Holguín and GitHub
2034babb6b
Bypass purls (mostly) for deny checks
2024-04-26 23:17:11 +00:00
Justin Hutchings
0e8bc32a54
Fix prettier linting
2024-03-12 22:06:54 +00:00
Justin Hutchings
f8ebb4b946
Add formatting around warning for low scorecard levels
2024-03-04 19:34:29 +00:00
Justin Hutchings
2fcc6a1c72
Fix config implementation
2024-03-04 18:17:53 +00:00
Justin Hutchings
ea64ae9d4d
Fix config mapping issue
2024-03-04 18:11:46 +00:00
tgrall
fc49851780
merge from main and fix code review comment from @juxtin
2024-01-28 10:16:07 +01:00
Justin Holguín and GitHub
ada103783f
Merge remote-tracking branch 'origin/retry-on-snapshot-warnings' into juxtin/dr-snaps-pre-launch
2023-08-31 16:31:44 +00:00
Sean Murphy
7ef37f3853
Merge branch 'main' into comment-on-failure
2023-08-09 17:31:16 -04:00
Adrien Pessu
00f1f5b642
add tests and docs
2023-08-07 14:07:46 +02:00
Adrien Pessu
6862f6f65f
add groups
2023-08-07 14:07:26 +02:00
Adrien Pessu
309d082d5f
initial commit
2023-08-07 14:07:26 +02:00
Sean Murphy
902e86c6f5
Add on-failure option to comment-summary-in-pr setting
2023-08-04 22:37:51 -04:00
Henri Maurer
c3c3c2e746
fix retry until
2023-06-14 10:12:19 +01:00
tgrall
9b290a185a
fix ini of warn-only param
2023-06-13 09:44:03 +02:00
tgrall
0b053fccb4
add new parameter warn_only
2023-06-12 11:26:44 +02:00
Henri Maurer
f6f94a23a4
fix
2023-06-09 10:44:43 +01:00
Henri Maurer
66b6f67835
Add configs
2023-06-09 10:26:24 +01:00
Stefan Petrushevski
0574926a14
document; code style;
2023-05-16 16:50:04 +02:00
Stefan Petrushevski
9ad7edb033
switched to purl format
2023-04-06 09:37:42 +02:00
Stefan Petrushevski
d5c2f70a7f
no inline config options due to limitations
2023-03-08 15:23:57 +01:00
Stefan Petrushevski
f92376010c
inline config options
2023-03-08 15:05:16 +01:00
Stefan Petrushevski
600458c5dd
licenses check exclusion list
2023-03-08 12:38:34 +01:00
David Losert and GitHub
1c85e9db8d
Adds option to write summary into a pr comment
2023-02-16 10:03:16 +00:00
Federico Builes
ac059c649c
Checkpoint!
2022-11-15 22:29:00 +01:00
Federico Builes
c57c602135
Force error casting to get messages!
2022-11-15 07:50:45 +01:00
Federico Builes
0a055a6a13
Improve error messages for external config files.
2022-11-15 07:45:29 +01:00
Federico Builes
ae538ebe32
Linting and whitespace. Smol rename.
2022-11-09 13:17:12 +01:00
Federico Builes
b4126ce983
Shuffle things around.
2022-11-09 13:16:53 +01:00
cnagadya
f0ff0b670a
Rename config token > external-repo-token
2022-11-08 11:16:26 +00:00
78565a954f
Dont merge config lists
...
Co-authored-by: Henri Maurer<[email protected] >
Co-authored-by: Federico Builes<[email protected] >
2022-11-08 10:52:30 +00:00
cnagadya
3c73a622ba
Fix config-file tests
2022-11-08 09:53:36 +00:00
cnagadya
13455c7175
Merge array config options
2022-11-07 17:57:05 +00:00
cnagadya
6d941b396a
Fix inconsistencies due to zod defaults / partials mixup
2022-11-07 17:08:00 +00:00
cnagadya
49ed3f2876
Merge lists in configs instead of overwritting them
2022-11-07 12:33:54 +00:00
cnagadya
b55cddb69d
Use config-file for both remote and local config-files
2022-11-07 12:12:03 +00:00
cnagadya
b4a2fbfa16
Complete functionality for handling remote config file
2022-11-04 14:51:41 +00:00
cnagadya and Henri Maurer
97e5a607ba
Handle getContent response as is
...
Co-authored-by: Henri Maurer <[email protected] >
2022-11-04 10:08:00 +00:00
cnagadya
3b410dc4ad
Load remote config file
2022-11-04 09:05:45 +00:00
Eric Cornelissen
c5af7ff272
Prevent disabling all checks
...
Prevent users from disabling both the license and vulnerability check by
checking if both are set to `false` and throwing if that's the case.
2022-10-28 22:08:55 +02:00
Eric Cornelissen
31279d265a
Add license-check and vulnerability-check inputs
...
Add support for two new inputs, named `license-check` and
`vulnerability-check`, to disable the license checks or vulnerability
checks performed by this action. By default, both are enabled.
2022-10-28 22:06:05 +02:00
cnagadya
022ea02fbb
Add unresolved licenses section
2022-10-27 13:09:37 +00:00
cnagadya
ac5ed8754d
Use SPDX license expressions
2022-10-26 09:56:34 +00:00
Sarah Aladetan
bcb52636bd
build and package allow-ghsas
2022-09-22 22:58:43 +00:00
Sarah Aladetan
bd61ea0d9e
create config option for ghsa allowlist
2022-09-22 21:34:18 +00:00
Federico Builes
4d3b8e5269
Clarify code a bit.
2022-09-21 17:01:00 +02:00
Federico Builes
54cd9a7cba
Merge branch 'main' into external-config
...
# Conflicts:
# README.md
# __tests__/config.test.ts
# dist/index.js.map
# src/config.ts
# src/schemas.ts
2022-09-21 16:50:02 +02:00