actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
221 Commits 90 Branches 61 Tags
4e9a45ca5b695215970f4931eff8d7609de8d8a3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 4e9a45ca5b Merge pull request #121 from kachick/fix-duplicate-words 
Fix duplicate words in README
 2022-06-16 06:58:18 +02:00
Federico Builes 83be5f6c90 bumping version 2022-06-16 06:56:22 +02:00
Federico Builes 1c59cdf2a9 Fix the unknown licenses error message 2022-06-16 06:03:16 +02:00
Federico BuilesandGitHub 29fc7a23bd Merge pull request #117 from actions/readme-capitalisation 
Fixing branding in the readme
 2022-06-15 15:40:19 +02:00
Federico Builes aabd50a60d Bumping version to 2.0.1 2022-06-15 15:27:15 +02:00
Federico BuilesandGitHub 981c44c2a9 Merge pull request #116 from actions/unknown-licenses 
Unknown licenses
 2022-06-15 15:26:38 +02:00
Federico Builes c0d32934e8 Adding dist. 2022-06-15 15:25:21 +02:00
Federico Builes 963fe8045d Always print null licenses. 2022-06-15 15:22:35 +02:00
Federico Builes bf94d94f63 Remove old TODO. 2022-06-15 15:22:14 +02:00
Federico BuilesandGitHub 43ce5df965 Update CONTRIBUTING.md 2022-06-15 14:03:10 +02:00
Federico Builes 24bc5e9934 Updating the CONTRIBUTING.md docs. 2022-06-15 14:01:47 +02:00
Federico Builes 97790d29c7 update version in package.json 2022-06-15 11:55:10 +02:00
Federico BuilesandGitHub 74dbdf9819 Merge pull request #112 from actions/move-config-file 
Move configuration file location
 2022-06-15 11:53:18 +02:00
Federico Builes f3f3519b2a Merge branch 'main' into move-config-file 2022-06-15 06:43:18 +02:00
Federico BuilesandGitHub 216910dd9a Merge pull request #113 from actions/dependabot/npm_and_yarn/prettier-2.7.0 
Bump prettier from 2.6.2 to 2.7.0
 2022-06-15 06:42:57 +02:00
Federico BuilesandGitHub 3f246861d8 Merge pull request #114 from actions/dependabot/npm_and_yarn/types/node-17.0.43 
Bump @types/node from 17.0.42 to 17.0.43
 2022-06-15 05:36:17 +02:00
Federico Builes faa63c3cba adding dist 2022-06-15 05:21:16 +02:00
Federico Builes c6587b663d Updating README with instructions for unknown licenses. 2022-06-14 14:11:01 +02:00
Federico Builes 42e2bc1ed2 Handle unknown licenses. 2022-06-14 13:54:27 +02:00
Federico Builes 0b87f02bee Document how we test inputs 2022-06-14 13:00:18 +02:00
Federico BuilesandGitHub 00be2ce1fc Typos. 2022-06-14 12:27:56 +02:00
Federico BuilesandGitHub 2860b57e48 Update README.md 2022-06-14 12:24:27 +02:00
Federico BuilesandHenri Maurer fd6e756c7b Updating readConfig() to be more readable, get rid of typecasts. 
Co-authored-by: Henri Maurer <[email protected]>
 2022-06-14 11:29:13 +02:00
Federico Builes f83a407eb9 Use the correct name for allowlists. 2022-06-14 09:46:59 +02:00
Federico Builes b0e1f384d7 Linting YAML 2022-06-14 09:05:05 +02:00
Federico Builes c973154c92 Dashes instead of underscores. 2022-06-14 07:50:25 +02:00
Federico Builes 3355ec4be5 adding dist 2022-06-14 07:44:17 +02:00
Federico Builes 76ad37608d Adding more tests for the config file. 2022-06-14 07:42:51 +02:00
Federico Builes 3eff3f5918 let => const 2022-06-14 07:42:13 +02:00
Federico Builes 7278093fa0 Clarify some of the error messages. 2022-06-14 07:41:37 +02:00
Federico Builes b5b49104d4 Adding the config definition to action.yml 2022-06-14 07:40:16 +02:00
Federico Builes e56fe29417 Remove old config file. 2022-06-14 07:38:45 +02:00
Federico Builes cc3101831d Updating dist. 2022-06-14 07:04:33 +02:00
Federico Builes ef97470a0f Don't set the defaults in the test :/ 2022-06-14 07:04:26 +02:00
Federico Builes efecf6fd09 Remove the variables from env so they don't default to empty strings. 2022-06-14 06:49:18 +02:00
Federico Builes 24d7ef3c5d Use an empty config options type. 2022-06-14 06:48:58 +02:00
Federico Builes 01fa67b82e adding dist 2022-06-14 06:26:18 +02:00
Federico Builes 1791775ce6 temp commit 2022-06-14 05:57:43 +02:00
Federico BuilesandGitHub 92f1ecaaea Merge pull request #106 from actions/adding-lists 
Adding allow and deny lists
 2022-06-14 04:45:37 +02:00
Federico BuilesandGitHub 47d4ff9127 Merge pull request #111 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.28.0 
Bump @typescript-eslint/parser from 5.27.1 to 5.28.0
 2022-06-14 04:45:19 +02:00
Federico BuilesandGitHub d616ba30f2 Merge pull request #110 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.28.0 
Bump @typescript-eslint/eslint-plugin from 5.27.1 to 5.28.0
 2022-06-14 04:43:24 +02:00
Federico Builes eebebcdc2a Use real PURLs in tests 2022-06-13 20:19:01 +02:00
Federico Builes 571f236610 Improved wording on license messages. 2022-06-13 20:08:16 +02:00
Federico Builes fe78920139 Document unwanted behavior for a future refactoring. 2022-06-13 20:04:39 +02:00
Federico BuilesandGitHub bd115a9b66 Merge pull request #108 from actions/dependabot/npm_and_yarn/types/node-17.0.42 
Bump @types/node from 17.0.40 to 17.0.42
 2022-06-13 11:36:18 +02:00
Federico Builes 21412fec7b fixing dist check 2022-06-09 10:46:00 +02:00
Federico Builes 0777fbe61e Updating dist. 2022-06-09 10:42:56 +02:00
Federico Builes cc22dcd654 Use undefined instead of null when dealing with lists. 2022-06-09 10:42:31 +02:00
Federico Builes 6b5518a9ed Adding more docs to licenses.ts 2022-06-09 10:33:05 +02:00
Federico Builes 20cca5c0c4 The default settings should not use []. 2022-06-08 18:28:10 +02:00
Federico Builes a51db20961 Use null for unspecified values when filtering licenses. 2022-06-08 18:21:28 +02:00
Federico Builes a7d02aef82 adding dist 2022-06-08 17:47:06 +02:00
Federico Builes 4ac3d318ab Refactoring on PR feedback. 2022-06-08 17:45:42 +02:00
Federico Builes 25271922eb Clarify variable names. 2022-06-08 15:53:14 +02:00
Federico Builes 4474253eb8 Merge branch 'main' into adding-lists 2022-06-07 06:23:53 +02:00
Federico BuilesandGitHub 1a7225bc91 Merge pull request #104 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.1 
Bump @typescript-eslint/parser from 5.27.0 to 5.27.1
 2022-06-07 06:20:33 +02:00
Federico BuilesandGitHub 4ebaca3419 Merge pull request #105 from actions/dependabot/npm_and_yarn/yaml-2.1.1 
Bump yaml from 2.1.0 to 2.1.1
 2022-06-07 06:20:17 +02:00
Federico Builes a96d28f120 Remove configuration docs until we have a proper release. 2022-06-07 06:19:22 +02:00
Federico BuilesandGitHub c187f6f12d Merge pull request #103 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.1 
Bump @typescript-eslint/eslint-plugin from 5.27.0 to 5.27.1
 2022-06-07 06:15:32 +02:00
Federico Builes 56e63b1bc5 adding dist 2022-06-06 20:32:46 +02:00
Federico Builes 2ae9a2d51b Add logic for denied licenses. 2022-06-06 20:32:46 +02:00
Federico Builes 1261e18905 Clarify license tests. 2022-06-06 20:32:46 +02:00
Federico Builes dc7b0a2788 Show an error when disallowed dependencies show up. 2022-06-06 20:32:46 +02:00
Federico Builes 06297bf229 Fixing failing tests 2022-06-06 20:32:46 +02:00
Federico Builes bccacf9708 Skeleton for license validation. 2022-06-06 20:32:46 +02:00
Federico Builes 8c646c1c91 Get rid of redundant variables. 2022-06-06 20:32:46 +02:00
Federico BuilesandGitHub 30c4549c8c Merge pull request #91 from actions/adding-config-file 
Adding configuration options
 2022-06-06 20:32:21 +02:00
Federico BuilesandGitHub 93c8cb2c8a Merge pull request #101 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.5.3 
Bump eslint-plugin-jest from 26.4.6 to 26.5.3
 2022-06-06 13:43:17 +02:00
Federico BuilesandGitHub d7c6d6203f Merge pull request #100 from actions/dependabot/npm_and_yarn/esbuild-register-3.3.3 
Bump esbuild-register from 3.3.2 to 3.3.3
 2022-06-06 13:34:38 +02:00
Federico BuilesandGitHub 545050ada5 Merge pull request #99 from actions/dependabot/npm_and_yarn/eslint-8.17.0 
Bump eslint from 8.16.0 to 8.17.0
 2022-06-06 13:31:00 +02:00
Federico BuilesandGitHub 2b674f0e26 Merge pull request #98 from actions/dependabot/npm_and_yarn/types/node-17.0.40 
Bump @types/node from 17.0.38 to 17.0.40
 2022-06-06 13:30:45 +02:00
Federico BuilesandGitHub 802525536f Merge pull request #97 from actions/dependabot/npm_and_yarn/typescript-4.7.3 
Bump typescript from 4.7.2 to 4.7.3
 2022-06-06 13:30:28 +02:00
Federico Builes 2f38c7e78c Add severity level to the vulns not found message. 2022-06-01 15:56:16 +02:00
Federico Builes c235374b9d Removing redundant test. 2022-06-01 13:42:22 +02:00
Federico Builes ae2949c9c1 Removing old file. 2022-06-01 13:40:09 +02:00
Federico Builes 3ae540bf96 Updating the README with config instructions. 2022-06-01 13:39:05 +02:00
Federico Builes 1c15a1745e Adding dependency-review.yml. 2022-06-01 13:38:42 +02:00
Federico Builes 19b36f0933 Use a more definitive name for the config file. 2022-06-01 13:28:03 +02:00
Federico Builes 0b9547aabf Adding more expectations for severities. 2022-06-01 13:14:32 +02:00
Federico Builes b327132e4b Remove state from the filtering function. 2022-06-01 13:10:58 +02:00
Federico Builes f9a13e70f4 Fixing circular reference, adding prettier. 2022-06-01 12:09:11 +02:00
Federico Builes db9f724163 Introduce a schema for ConfigurationOptions. 
This commit illustrates an approach, but is currently
failing the tests.
 2022-06-01 06:36:02 +02:00
Federico Builes 7db11574b7 Make vulnerabilities be [] by default. 2022-06-01 05:36:46 +02:00
Federico Builes 7063d0ca45 Don't modify array in place. 2022-06-01 05:32:50 +02:00
Federico Builes 2dd55385c1 Use let instead of var, fix failing test. 2022-06-01 05:31:33 +02:00
Federico BuilesandGitHub 48729e4e38 Merge pull request #96 from actions/dependabot/npm_and_yarn/types/node-17.0.38 
Bump @types/node from 17.0.36 to 17.0.38
 2022-06-01 04:48:28 +02:00
Federico Builes 4235242818 adding dist files 2022-05-31 17:09:21 +02:00
Federico Builes 731e67eca2 Add filtering by low severity as the default. 2022-05-31 17:08:22 +02:00
Federico Builes b601c09c4e Merge branch 'main' into adding-config-file 2022-05-31 16:59:33 +02:00
Federico Builes 982e1d16cb Whitespace and newlines. 2022-05-31 16:54:59 +02:00
Federico Builes f0a04841ce Adding logic to filter by vulnerability severity. 2022-05-31 16:50:39 +02:00
Federico Builes e622e72c6f Export Change schema. 2022-05-31 06:06:19 +02:00
Federico Builes 92e40d7290 Move printing function out. 2022-05-31 06:03:42 +02:00
Federico BuilesandGitHub 21763d05e0 Merge pull request #94 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.4.6 
Bump eslint-plugin-jest from 26.4.5 to 26.4.6
 2022-05-31 05:25:05 +02:00
Federico BuilesandGitHub 2c245d1aba Merge pull request #93 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.0 
Bump @typescript-eslint/parser from 5.26.0 to 5.27.0
 2022-05-31 05:24:37 +02:00
Federico BuilesandGitHub 088fc4d4e8 Merge pull request #92 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.0 
Bump @typescript-eslint/eslint-plugin from 5.26.0 to 5.27.0
 2022-05-31 05:21:37 +02:00
Federico Builes 0b73ead548 Merge branch 'main' into adding-config-file 2022-05-30 06:37:29 +02:00
Federico BuilesandGitHub 67a046c994 Merge pull request #89 from actions/dependabot/npm_and_yarn/types/node-17.0.36 
Bump @types/node from 17.0.35 to 17.0.36
 2022-05-30 06:30:17 +02:00
Federico BuilesandGitHub 64c25ba2f4 Merge pull request #90 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.4.5 
Bump eslint-plugin-jest from 26.2.2 to 26.4.5
 2022-05-30 06:30:05 +02:00
Federico Builes a8dcc6b774 Adding basic config file parsing and some test scaffolding. 2022-05-26 15:54:59 -07:00