actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,590 Commits 90 Branches 61 Tags
7e2c3c347b622fe74c655d91a3c33672536292a2
Commit Graph
1590 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin HolguínandGitHub 7e2c3c347b Show denied packages with red X 2024-04-24 22:11:24 +00:00
Justin HolguínandGitHub f456418f6a Merge pull request #737 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.2 
Bump eslint-plugin-github from 4.10.1 to 4.10.2
 2024-04-24 14:59:31 -07:00
Justin HolguínandGitHub 19bd35e07b Merge pull request #744 from actions/dependabot/npm_and_yarn/typescript-5.4.5 
Bump typescript from 5.3.3 to 5.4.5
 2024-04-24 14:57:23 -07:00
Justin HolguínandGitHub ff97293707 Update dist 2024-04-24 21:55:26 +00:00
dependabot[bot]andGitHub 5498b6c4c3 Bump typescript from 5.3.3 to 5.4.5 
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.3.3 to 5.4.5.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.3.3...v5.4.5)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-04-24 21:39:33 +00:00
Justin HolguínandGitHub 68488bcecb Merge pull request #748 from actions/issue-738 
Fix extra https:// in summary
 2024-04-24 13:54:40 -07:00
Justin Hutchings 16a0212a77 Build source 2024-04-23 17:31:55 +00:00
Justin Hutchings 6d3fba9bf2 Remove extra https:// 2024-04-23 17:26:55 +00:00
dependabot[bot]andGitHub 72aedfc147 Bump eslint-plugin-github from 4.10.1 to 4.10.2 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.10.1 to 4.10.2.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.10.1...v4.10.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-04-01 01:25:22 +00:00
Federico Builes 2ce029c676 Fix another incidence of the OpenSSF config name. 2024-03-28 06:54:16 +01:00
Federico BuilesandGitHub 1c949fbe77 Merge pull request #735 from StacklokLabs/rename-openssf-scorecard 
Readme action variable name for scorecard is wrong
 2024-03-28 06:52:47 +01:00
Luke Hinds bddd13d857 Readme action variable name for scorecard is wrong 
The actual name from action.yaml is `show-openssf-scorecard`
and not `show-openssf-scorecard-levels`

Signed-off-by: Luke Hinds <[email protected]>
 2024-03-27 17:18:17 -07:00
Federico Builes 5bbc3ba658 bumping version v4.2.5 2024-03-26 08:04:16 +01:00
Federico BuilesandGitHub c59184aa7f Merge pull request #722 from actions/remove-warn-default 
Revert default values in action.yml to fix external configs
 2024-03-26 07:55:00 +01:00
Federico BuilesandGitHub 54c06574f4 Merge pull request #728 from actions/dependabot/npm_and_yarn/eslint-8.57.0 
Bump eslint from 8.56.0 to 8.57.0
 2024-03-25 06:27:19 +01:00
dependabot[bot]andGitHub 21941b530b Bump eslint from 8.56.0 to 8.57.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.56.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.56.0...v8.57.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-03-25 01:27:32 +00:00
Federico Builes 733dd5d4a5 bumping to 4.2.4 v4.2.4 2024-03-24 14:59:17 +01:00
Federico BuilesandGitHub 9093495859 Merge pull request #725 from actions/issue-718 
Bug fixes to #718
 2024-03-24 14:56:57 +01:00
Justin Hutchings 35b83b4207 Fix prettier issues 2024-03-22 21:59:08 +00:00
Justin Hutchings e057056594 Add packaged code update 2024-03-22 21:31:00 +00:00
Justin Hutchings d684d038b2 Add trailing slash to tests 2024-03-22 21:21:52 +00:00
Justin Hutchings 2b0aaf1638 Fix extra slash issue 2024-03-22 21:20:15 +00:00
Justin Hutchings d9209374af Fix repositoryUrl issues around GitHub Actions 2024-03-22 21:00:38 +00:00
Federico Builes 651d22c5d5 Revert default values in action.yml to fix external configs. 2024-03-22 08:29:26 +01:00
Eli ReismanandGitHub 02b13f6b52 Merge pull request #721 from sporkmonger/patch-1 
Typo fixes in README
 2024-03-21 17:18:11 -07:00
Bob AmanandGitHub 6e0fa26ac3 Typo fixes 
Fixed a couple spelling errors.
 2024-03-21 16:37:36 -07:00
Federico Builes 0fa40c3c10 bumping to 4.2.3. v4.2.3 2024-03-20 17:57:26 +01:00
Federico BuilesandGitHub 1f6240f54c Merge pull request #707 from laughedelic/feat/data-outputs 
Add outputs for the changes data
 2024-03-20 17:47:40 +01:00
Federico BuilesandGitHub b751d41e7e Merge pull request #702 from actions/dependabot/npm_and_yarn/nodemon-3.1.0 
Bump nodemon from 3.0.3 to 3.1.0
 2024-03-20 06:48:20 +01:00
Federico BuilesandGitHub 6183eb9d2b Merge pull request #703 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.9.0 
Bump eslint-plugin-jest from 27.6.3 to 27.9.0
 2024-03-20 06:48:14 +01:00
laughedelic 6585cc5f01 fix run syntax 2024-03-19 21:23:25 +01:00
laughedelic 218a76cbd5 add clarification about output usage hygiene 2024-03-19 21:22:12 +01:00
laughedelic d78d095945 revert changes in CI 2024-03-19 19:48:45 +01:00
Federico BuilesandGitHub 36297aa214 Merge pull request #716 from actions/dependabot/npm_and_yarn/types/node-20.11.28 
Bump @types/node from 20.11.19 to 20.11.28
 2024-03-18 05:01:38 +01:00
dependabot[bot]andGitHub 1e69a8c24a Bump @types/node from 20.11.19 to 20.11.28 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.19 to 20.11.28.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-03-18 02:01:11 +00:00
Jon JanegoandGitHub 2f10643938 Merge pull request #715 from actions/jonjanego-patch-2 
Update README.md
 2024-03-15 11:24:37 -05:00
Jon JanegoandGitHub 1eb83b5560 Update README.md 
minor text clarifications to keep consistent with wording in (the docs)[https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review]
 2024-03-15 11:22:32 -05:00
laughedelic 47b7acc8e3 update dist 2024-03-15 03:22:15 +01:00
laughedelic 16bfb3360c Merge branch 'main' into feat/data-outputs 2024-03-15 03:21:07 +01:00
Alexey AlekhinandGitHub bc6a1f0dd4 avoid using if: always() 2024-03-15 03:01:16 +01:00
Alexey AlekhinGitHubFederico Builes
 		e38e634e54 Apply suggestions for docs 
Co-authored-by: Federico Builes <[email protected]>
 2024-03-15 02:32:15 +01:00
Jon JanegoandGitHub 5574be321f Merge pull request #712 from actions/jonjanego-patch-1 
Update stale.yaml and CONTRIBUTING.md
 2024-03-14 15:23:18 -05:00
Jon JanegoandGitHub aef51371b7 Update CONTRIBUTING.md 
explaining stalebot
 2024-03-14 14:44:38 -05:00
Jon JanegoandGitHub 3b70c9966e Update stale.yaml 
fixing some comments, adding a keep label for issues, explicitly defining labeling behavior for issues
 2024-03-14 14:43:08 -05:00
Federico BuilesandGitHub adaed32746 Merge pull request #709 from jhutchings1/scorecard 
Add support for calculating OpenSSF Scorecards
 2024-03-14 06:30:21 +01:00
Justin Hutchings 4ce120135b Fix OpenSSF Scorecard display issue 2024-03-13 16:23:23 +00:00
Justin Hutchings 0e8bc32a54 Fix prettier linting 2024-03-12 22:06:54 +00:00
Justin Hutchings f875e6ec1d Simplify truthiness check 2024-03-12 21:49:01 +00:00
Justin Hutchings 72666694f0 Fix broken tests, clean up dead code 2024-03-12 21:32:27 +00:00
Justin Hutchings 7dc5f537be Add scorecard to summary and count scorecard warnings 2024-03-12 20:47:25 +00:00