tgrall
621d03bf3a
Add none as option for fail-on-severity
2023-03-18 05:21:58 +01:00
David Losert and GitHub
6b34d93738
Skips dependency review if no changes detected
2023-03-02 07:47:09 +00:00
David Losert and GitHub
6315b3822f
Renames variable to be more speaking
2023-02-28 12:27:55 +00:00
David Losert and GitHub
19ee172e7e
feat: Adjusts the formatting and content for the status header
2023-02-22 14:05:52 +00:00
David Losert and GitHub
1c85e9db8d
Adds option to write summary into a pr comment
2023-02-16 10:03:16 +00:00
Chad Bentz
e6aba92fb0
Enhance failure message to include GHAS note
2023-01-05 17:26:46 +00:00
cnagadya
6d941b396a
Fix inconsistencies due to zod defaults / partials mixup
2022-11-07 17:08:00 +00:00
cnagadya
b4a2fbfa16
Complete functionality for handling remote config file
2022-11-04 14:51:41 +00:00
Eric Cornelissen
84921e5e4a
Simplify Summary summary based on license-check and vulnerability-check
...
Omit details related to the license check of vulnerability check from
the GitHub Actions Summary's summary if the respective check is disabled
from the configuration.
2022-10-28 22:15:44 +02:00
Eric Cornelissen
31279d265a
Add license-check and vulnerability-check inputs
...
Add support for two new inputs, named `license-check` and
`vulnerability-check`, to disable the license checks or vulnerability
checks performed by this action. By default, both are enabled.
2022-10-28 22:06:05 +02:00
216fafaed5
PR feedback
...
Co-authored-by: Federico Builes <[email protected]
2022-10-28 11:23:05 +02:00
cnagadya
7b16bd0b54
Add unvalidated changes to summary
2022-10-27 16:24:30 +00:00
cnagadya
022ea02fbb
Add unresolved licenses section
2022-10-27 13:09:37 +00:00
cnagadya
d1e9a12830
Resolve conflicts
2022-10-13 11:06:40 +00:00
Federico Builes and Christine Nagadya
2dd6c6a3d7
Fixing a bug with GHSA filtering.
...
Co-authored-by: Christine Nagadya <[email protected]
2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf
Document the behavior of the GHSA filtering function.
2022-10-11 15:09:58 +02:00
Federico Builes
ee42a6512f
Show the dependency name instead of the manifest.
2022-10-11 14:50:55 +02:00
Federico Builes
468485fc8e
Clean up the main script a bit.
2022-09-27 12:25:12 +02:00
Federico Builes
0515f5cb39
Adding a skeleton for scanned dependencies in the summary.
2022-09-26 19:14:04 +02:00
Federico Builes
2d1d679f58
Move manifest grouping outside main.ts
2022-09-26 19:13:25 +02:00
Federico Builes
a3563a05bc
Use a set instead of raw JS objects.
2022-09-26 12:41:16 +02:00
Federico Builes
8a20ddbf25
try adding 3 sections
2022-09-26 12:21:24 +02:00
Federico Builes
60be833ffd
Update manifest formatting in output.
2022-09-26 12:01:39 +02:00
Federico Builes
000837f2ac
Don't nest groups.
2022-09-26 11:41:02 +02:00
Federico Builes
89f99d150a
adding colors to the dep output
2022-09-26 11:35:05 +02:00
Federico Builes
78c7c01396
Merge branch 'main' into add-scanned-deps
...
# Conflicts:
# dist/index.js.map
2022-09-26 08:47:23 +02:00
Sarah Aladetan
4f00b72b84
filter allowed ghsas in action flow
2022-09-22 22:25:21 +00:00
Federico Builes
723ec8c0d3
Try showing information about the scanned dependencies.
2022-09-22 16:49:45 +02:00
Sarah Aladetan
0d23c39a5d
filter by scope in action
2022-09-15 20:03:27 +00:00
Federico Builes
5da7945e2b
Fixing lint/dist.
2022-08-18 16:15:03 +02:00
Federico Builes and GitHub
0e0d6ec5d6
Merge branch 'main' into add-summary
2022-08-18 16:11:15 +02:00
Tiago Pascoal
aef949f026
Show vulnerabities and license information on the job summary.
...
Users can see the results that were found directly on the job summary
All the results are grouped by manifest.
It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.
Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
2022-08-04 15:35:07 +00:00
Will Da Silva
388b1a309d
Support user-provided base/head refs & non-PR workflows
2022-07-21 15:47:05 -04:00
Kenichi Kamiya
9fdc2574b8
Fix rest eslint errors manually
2022-07-04 20:12:07 +09:00
Kenichi Kamiya
6e9189a5c1
npx eslint --fix src/**/*.ts
2022-07-04 20:12:07 +09:00
Federico Builes
1c59cdf2a9
Fix the unknown licenses error message
2022-06-16 06:03:16 +02:00
Federico Builes
963fe8045d
Always print null licenses.
2022-06-15 15:22:35 +02:00
Federico Builes
42e2bc1ed2
Handle unknown licenses.
2022-06-14 13:54:27 +02:00
Federico Builes
7278093fa0
Clarify some of the error messages.
2022-06-14 07:41:37 +02:00
Federico Builes
1791775ce6
temp commit
2022-06-14 05:57:43 +02:00
Federico Builes
571f236610
Improved wording on license messages.
2022-06-13 20:08:16 +02:00
Federico Builes
4ac3d318ab
Refactoring on PR feedback.
2022-06-08 17:45:42 +02:00
Federico Builes
2ae9a2d51b
Add logic for denied licenses.
2022-06-06 20:32:46 +02:00
Federico Builes
dc7b0a2788
Show an error when disallowed dependencies show up.
2022-06-06 20:32:46 +02:00
Federico Builes
06297bf229
Fixing failing tests
2022-06-06 20:32:46 +02:00
Federico Builes
bccacf9708
Skeleton for license validation.
2022-06-06 20:32:46 +02:00
Federico Builes
2f38c7e78c
Add severity level to the vulns not found message.
2022-06-01 15:56:16 +02:00
Federico Builes
f9a13e70f4
Fixing circular reference, adding prettier.
2022-06-01 12:09:11 +02:00
Federico Builes
7db11574b7
Make vulnerabilities be [] by default.
2022-06-01 05:36:46 +02:00
Federico Builes
731e67eca2
Add filtering by low severity as the default.
2022-05-31 17:08:22 +02:00
tgrall