actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,598 Commits 90 Branches 61 Tags
80116a45643ff43f7a179a9997072b5988dc5e80
Commit Graph
1598 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Brandon Teng 80116a4564 Merge branch 'main' into deny-list-version 2024-04-24 16:35:05 -05:00
Justin HolguínandGitHub 68488bcecb Merge pull request #748 from actions/issue-738 
Fix extra https:// in summary
 2024-04-24 13:54:40 -07:00
Justin Hutchings 16a0212a77 Build source 2024-04-23 17:31:55 +00:00
Justin Hutchings 6d3fba9bf2 Remove extra https:// 2024-04-23 17:26:55 +00:00
Brandon Teng c6cc8585a0 building and packaging action 2024-04-16 16:25:58 -05:00
Brandon Teng c32a0148b3 throwing parsing error up instead of swallowing it 2024-04-16 16:25:28 -05:00
Brandon Teng 67d0214607 simplifying tests 2024-04-16 16:04:25 -05:00
Brandon Teng 3ca15314ff transforming package URLs during zod parsing 2024-04-16 16:04:11 -05:00
Brandon Teng a318e62c6c using packageurl-js to parse packages and groups from config 2024-04-16 12:44:51 -05:00
Brandon Teng 061f471b83 updating docs 2024-04-04 15:48:24 -05:00
Brandon Teng 012eca3d4d building and packaging action 2024-04-04 15:35:28 -05:00
Brandon Teng 8739aa4bb3 Merge branch 'main' into deny-list-version 2024-04-04 15:26:19 -05:00
Brandon Teng a323510dae more refactoring for getDeniedChanges 2024-04-04 15:18:51 -05:00
Brandon Teng 7cebd9d64d refactoring getDeniedChanges 2024-04-04 15:04:45 -05:00
Brandon Teng f8ca44e2de updating README 2024-04-04 13:26:08 -05:00
Brandon Teng 411e5ec44f updating deny-packages config option to deny exact version or wildcard 2024-04-04 13:25:54 -05:00
Federico Builes 2ce029c676 Fix another incidence of the OpenSSF config name. 2024-03-28 06:54:16 +01:00
Federico BuilesandGitHub 1c949fbe77 Merge pull request #735 from StacklokLabs/rename-openssf-scorecard 
Readme action variable name for scorecard is wrong
 2024-03-28 06:52:47 +01:00
Luke Hinds bddd13d857 Readme action variable name for scorecard is wrong 
The actual name from action.yaml is `show-openssf-scorecard`
and not `show-openssf-scorecard-levels`

Signed-off-by: Luke Hinds <[email protected]>
 2024-03-27 17:18:17 -07:00
Federico BuilesandBrandon Teng 0e665bf3ac Adding a failing test. 
Co-authored-by: Brandon Teng <[email protected]>
 2024-03-27 15:05:17 +01:00
Federico Builes 5bbc3ba658 bumping version v4.2.5 2024-03-26 08:04:16 +01:00
Federico BuilesandGitHub c59184aa7f Merge pull request #722 from actions/remove-warn-default 
Revert default values in action.yml to fix external configs
 2024-03-26 07:55:00 +01:00
Federico BuilesandGitHub 54c06574f4 Merge pull request #728 from actions/dependabot/npm_and_yarn/eslint-8.57.0 
Bump eslint from 8.56.0 to 8.57.0
 2024-03-25 06:27:19 +01:00
dependabot[bot]andGitHub 21941b530b Bump eslint from 8.56.0 to 8.57.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.56.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.56.0...v8.57.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-03-25 01:27:32 +00:00
Federico Builes 733dd5d4a5 bumping to 4.2.4 v4.2.4 2024-03-24 14:59:17 +01:00
Federico BuilesandGitHub 9093495859 Merge pull request #725 from actions/issue-718 
Bug fixes to #718
 2024-03-24 14:56:57 +01:00
Justin Hutchings 35b83b4207 Fix prettier issues 2024-03-22 21:59:08 +00:00
Justin Hutchings e057056594 Add packaged code update 2024-03-22 21:31:00 +00:00
Justin Hutchings d684d038b2 Add trailing slash to tests 2024-03-22 21:21:52 +00:00
Justin Hutchings 2b0aaf1638 Fix extra slash issue 2024-03-22 21:20:15 +00:00
Justin Hutchings d9209374af Fix repositoryUrl issues around GitHub Actions 2024-03-22 21:00:38 +00:00
Federico Builes 651d22c5d5 Revert default values in action.yml to fix external configs. 2024-03-22 08:29:26 +01:00
Eli ReismanandGitHub 02b13f6b52 Merge pull request #721 from sporkmonger/patch-1 
Typo fixes in README
 2024-03-21 17:18:11 -07:00
Bob AmanandGitHub 6e0fa26ac3 Typo fixes 
Fixed a couple spelling errors.
 2024-03-21 16:37:36 -07:00
Federico Builes 0fa40c3c10 bumping to 4.2.3. v4.2.3 2024-03-20 17:57:26 +01:00
Federico BuilesandGitHub 1f6240f54c Merge pull request #707 from laughedelic/feat/data-outputs 
Add outputs for the changes data
 2024-03-20 17:47:40 +01:00
Federico BuilesandGitHub b751d41e7e Merge pull request #702 from actions/dependabot/npm_and_yarn/nodemon-3.1.0 
Bump nodemon from 3.0.3 to 3.1.0
 2024-03-20 06:48:20 +01:00
Federico BuilesandGitHub 6183eb9d2b Merge pull request #703 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.9.0 
Bump eslint-plugin-jest from 27.6.3 to 27.9.0
 2024-03-20 06:48:14 +01:00
laughedelic 6585cc5f01 fix run syntax 2024-03-19 21:23:25 +01:00
laughedelic 218a76cbd5 add clarification about output usage hygiene 2024-03-19 21:22:12 +01:00
laughedelic d78d095945 revert changes in CI 2024-03-19 19:48:45 +01:00
Federico BuilesandGitHub 36297aa214 Merge pull request #716 from actions/dependabot/npm_and_yarn/types/node-20.11.28 
Bump @types/node from 20.11.19 to 20.11.28
 2024-03-18 05:01:38 +01:00
dependabot[bot]andGitHub 1e69a8c24a Bump @types/node from 20.11.19 to 20.11.28 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.19 to 20.11.28.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-03-18 02:01:11 +00:00
Jon JanegoandGitHub 2f10643938 Merge pull request #715 from actions/jonjanego-patch-2 
Update README.md
 2024-03-15 11:24:37 -05:00
Jon JanegoandGitHub 1eb83b5560 Update README.md 
minor text clarifications to keep consistent with wording in (the docs)[https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review]
 2024-03-15 11:22:32 -05:00
laughedelic 47b7acc8e3 update dist 2024-03-15 03:22:15 +01:00
laughedelic 16bfb3360c Merge branch 'main' into feat/data-outputs 2024-03-15 03:21:07 +01:00
Alexey AlekhinandGitHub bc6a1f0dd4 avoid using if: always() 2024-03-15 03:01:16 +01:00
Alexey AlekhinGitHubFederico Builes
 		e38e634e54 Apply suggestions for docs 
Co-authored-by: Federico Builes <[email protected]>
 2024-03-15 02:32:15 +01:00
Jon JanegoandGitHub 5574be321f Merge pull request #712 from actions/jonjanego-patch-1 
Update stale.yaml and CONTRIBUTING.md
 2024-03-14 15:23:18 -05:00