actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,827 Commits 90 Branches 61 Tags
5558c35bb3e79ef0a0f2d9896a56060e24df9bea
Commit Graph
128 Commits
Author SHA1 Message Date
Eric Sorenson 5558c35bb3 Address discrepancy between docs and reality 
The documentation used to say that you needed to transform keys
in external config files from using `-` to `_`, but in reality
the code transforms `-` to `_` regardless of where they occur.

See 4b4ec08f7b

Closes #909
 2025-08-15 17:16:55 -07:00
Kevin Dangoor 0e9e935cc8 Version 4.7.0 release 
Also add a note about the new `LicenseRef-clearlydefined-OTHER`
to the README.
 2025-05-08 13:58:56 -04:00
PantelisandGitHub 3d00aed36d Update README.md 2025-03-06 14:43:51 +01:00
robertandGitHub eb0576373a fix show-openssf-scorecard-levels input 
The input in the README was wrong, I have fixed it to match action.yml.
 2024-06-03 12:20:08 -04:00
Anne-Marie 87b53ae475 add line break 2024-05-30 11:10:36 +00:00
Anne-Marie c601a5a741 combining Output notes 2024-05-30 11:02:59 +00:00
Jon JanegoandGitHub 5751523f41 Update README.md 2024-05-29 13:21:44 -05:00
Anne-MarieandGitHub 3fe3159bb9 Indenting to match vulnerable-changes 2024-05-27 09:15:58 +02:00
Anne-MarieGitHubJon Janego
 		2d3c93c0e0 Update README.md 
Co-authored-by: Jon Janego <[email protected]>
 2024-05-27 09:14:01 +02:00
Anne-MarieGitHubJon Janego
 		9770b8da2c Update README.md 
Co-authored-by: Jon Janego <[email protected]>
 2024-05-27 09:13:46 +02:00
Anne-Marie d5b8317942 edits 2024-05-24 07:35:18 +00:00
Anne-Marie d3670a3e49 updating GHES links 2024-05-23 10:38:06 +00:00
Anne-Marie f38966fbec updating overview 2024-05-23 10:26:42 +00:00
Anne-Marie 9eb0dccbc9 editing configuration and remaining sections 2024-05-23 10:03:57 +00:00
Anne-Marie 258a2295c6 installation section 2024-05-23 09:37:47 +00:00
Anne-MarieandGitHub 4c0a483c95 Update README.md 2024-05-23 10:22:01 +02:00
Brandon Teng f8ca44e2de updating README 2024-04-04 13:26:08 -05:00
Bob AmanandGitHub 6e0fa26ac3 Typo fixes 
Fixed a couple spelling errors.
 2024-03-21 16:37:36 -07:00
Federico BuilesandGitHub 1f6240f54c Merge pull request #707 from laughedelic/feat/data-outputs 
Add outputs for the changes data
 2024-03-20 17:47:40 +01:00
laughedelic 6585cc5f01 fix run syntax 2024-03-19 21:23:25 +01:00
laughedelic 218a76cbd5 add clarification about output usage hygiene 2024-03-19 21:22:12 +01:00
Jon JanegoandGitHub 1eb83b5560 Update README.md 
minor text clarifications to keep consistent with wording in (the docs)[https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review]
 2024-03-15 11:22:32 -05:00
laughedelic 16bfb3360c Merge branch 'main' into feat/data-outputs 2024-03-15 03:21:07 +01:00
Alexey AlekhinGitHubFederico Builes
 		e38e634e54 Apply suggestions for docs 
Co-authored-by: Federico Builes <[email protected]>
 2024-03-15 02:32:15 +01:00
Justin Hutchings 296bf3ab1b Add docs, implement warning behavior 2024-03-08 01:29:53 +00:00
laughedelic 05fcfa49e0 add a note about outputs size limit 2024-03-04 18:58:48 +01:00
laughedelic 75be7f0c0c clarify docs, add a usage example 2024-03-04 18:53:03 +01:00
laughedelic ab8c3848de docs: update readme 2024-03-02 05:09:49 +01:00
Federico BuilesandGitHub c94f57ba90 Add a new image for the example report. 2024-02-19 17:18:02 +01:00
Federico Builes 7911825c25 Point directly to DR API. 2024-02-19 16:38:15 +01:00
Josh Soref 2876926e7f Expose dependency comment content 2024-02-19 10:09:03 -05:00
Josh Soref da507e61ac Add minimal alt text to README 2024-02-19 10:06:32 -05:00
Josh Soref 0034949d8d Remove /en/ from doc links 
The docs server will redirect based on the user's browser's
preference.
 2024-02-19 10:06:32 -05:00
Josh Soref f1706f5a9d Remove obsolete reference to GHES 3.8 
GHES 3.7 reached EOL 2024-01-04, as such all GHES versions should be supported.
 2024-02-19 09:49:21 -05:00
Josh Soref a569f6fc5c Remove obsolete references to GHES 3.6 
GHES 3.6 reached EOL 2023-09-25.
 2024-02-19 09:49:21 -05:00
tgrall 98e8293881 Update Readme and action.yml based on review comments 2024-02-01 06:03:53 +01:00
tgrall d6f324d18a fix typo in readme 2024-01-28 14:24:12 +01:00
tgrall fc49851780 merge from main and fix code review comment from @juxtin 2024-01-28 10:16:07 +01:00
Federico Builes 4cd9eb2d23 Updating docs to point to v4. 2024-01-18 14:23:52 +01:00
Josh Soref cf3393ef0a Drop references to v2 from README 
Signed-off-by: Josh Soref <[email protected]>
 2023-09-27 12:53:32 -04:00
Josh Soref 8213a1db10 Use checkout@v4 
Signed-off-by: Josh Soref <[email protected]>
 2023-09-27 12:53:32 -04:00
Justin HolguínandGitHub 85df23de2c Update readme with new parameters 2023-09-07 21:17:45 +00:00
Justin HolguínandGitHub 5da6fdbdf9 Clean up markdown formatting 2023-09-07 21:11:56 +00:00
Sean Murphy 7ef37f3853 Merge branch 'main' into comment-on-failure 2023-08-09 17:31:16 -04:00
Federico BuilesandGitHub fe2a482baf Apply suggestions from code review 2023-08-09 15:24:26 +02:00
Adrien Pessu 1db9156f85 change from name of the package to the package url to avoid conflict between 2 dependencies with the same name but for different ecosystems 2023-08-08 16:34:23 +02:00
Adrien Pessu 00f1f5b642 add tests and docs 2023-08-07 14:07:46 +02:00
Sean Murphy 902e86c6f5 Add on-failure option to comment-summary-in-pr setting 2023-08-04 22:37:51 -04:00
Federico BuilesandGitHub 0a68c5dfa6 Update README.md 2023-07-19 16:26:44 +02:00
Federico BuilesandGitHub f015f96b55 Update README.md 2023-07-19 16:26:39 +02:00