actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
682 Commits 90 Branches 61 Tags
8d9ea3eb63a4e7cc74c3c62bda770e4df608bbd7
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 7a42af0f2f Merge pull request #320 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.4 
Bump eslint-plugin-jest from 27.1.3 to 27.1.4
 2022-11-08 10:40:36 +01:00
Federico BuilesandGitHub 40e460b464 Merge pull request #316 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.1 
Bump @typescript-eslint/parser from 5.42.0 to 5.42.1
 2022-11-08 10:38:41 +01:00
Federico BuilesandGitHub 774bd6c1d5 Merge pull request #318 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.1 
Bump eslint-plugin-github from 4.4.0 to 4.4.1
 2022-11-08 10:37:41 +01:00
Federico BuilesandGitHub f7686f8c21 Merge pull request #317 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.1 
Bump @typescript-eslint/eslint-plugin from 5.42.0 to 5.42.1
 2022-11-08 10:36:16 +01:00
Federico BuilesandGitHub 7ce779229f Merge pull request #319 from actions/dependabot/npm_and_yarn/eslint-8.27.0 
Bump eslint from 8.26.0 to 8.27.0
 2022-11-08 08:34:38 +01:00
Federico BuilesandGitHub 2f696d8c7a Merge pull request #314 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 
Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0
 2022-11-01 08:10:28 +01:00
Federico BuilesandGitHub ad6e320da1 Merge pull request #313 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.0 
Bump @typescript-eslint/parser from 5.41.0 to 5.42.0
 2022-11-01 08:09:22 +01:00
Federico BuilesandGitHub 10dc05ba09 Merge pull request #311 from ericcornelissen/308-disable-license-or-vuln 
Add `license-check` and `vulnerability-check` inputs
 2022-10-31 07:56:37 +01:00
Federico BuilesandGitHub 04f48dec81 Update __tests__/config.test.ts 2022-10-31 07:55:17 +01:00
Federico BuilesandGitHub bb5c0c7ca0 Merge pull request #312 from actions/dependabot/npm_and_yarn/types/node-16.18.3 
Bump @types/node from 16.18.2 to 16.18.3
 2022-10-31 06:42:09 +01:00
Federico BuilesandGitHub 2532504548 Merge pull request #310 from actions/cn/node-18 
Upgrade to Node 18
 2022-10-28 13:46:26 +02:00
Federico BuilesandGitHub fa62a0febc Merge pull request #294 from actions/cn/spdx-licenses 
Add support for SPDX expressions
 2022-10-28 11:27:18 +02:00
Federico BuilesandGitHub d6e28cdfae Merge pull request #307 from actions/dependabot/npm_and_yarn/types/node-16.18.2 
Bump @types/node from 16.18.0 to 16.18.2
 2022-10-27 07:34:11 +02:00
Federico BuilesandGitHub 024a5a6342 Merge pull request #305 from actions/dependabot/npm_and_yarn/octokit-2.0.10 
Bump octokit from 2.0.9 to 2.0.10
 2022-10-26 08:49:12 +02:00
Federico Builes b2fc686406 Resolving merge conflicts 2022-10-26 08:47:43 +02:00
Federico BuilesandGitHub cfef8bfe29 Merge pull request #304 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-4.0.3 
Bump @octokit/plugin-retry from 3.0.9 to 4.0.3
 2022-10-26 08:45:28 +02:00
Federico Builes bd43b8d1e2 updating dist 2022-10-26 08:45:18 +02:00
Federico BuilesandGitHub 65f9f50468 Merge pull request #303 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.41.0 
Bump @typescript-eslint/parser from 5.40.1 to 5.41.0
 2022-10-25 07:57:41 +02:00
Federico BuilesandGitHub 56163c5659 Merge pull request #302 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.41.0 
Bump @typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0
 2022-10-25 07:56:10 +02:00
Federico Builes 0efb1d1d84 bumping to 2.5.1 2022-10-24 17:03:38 +02:00
Federico BuilesandGitHub d4f6425aa4 Merge pull request #290 from actions/cn/scan_pr 
Enable setting configuration options for local testing
 2022-10-24 16:55:54 +02:00
Federico BuilesGitHubcnagadya
 		49a61bd9bd Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:54:03 +02:00
Federico BuilesGitHubcnagadya
 		06c01e11e8 Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:53:56 +02:00
Federico BuilesandGitHub 4538b29c27 Merge pull request #300 from actions/dependabot/npm_and_yarn/eslint-8.26.0 
Bump eslint from 8.25.0 to 8.26.0
 2022-10-24 07:14:08 +02:00
Federico BuilesandGitHub 4153ec555a Merge pull request #299 from actions/dependabot/npm_and_yarn/types/node-16.18.0 
Bump @types/node from 16.11.68 to 16.18.0
 2022-10-24 07:13:59 +02:00
Federico Builes 80e573b784 Fixing whitespace. 2022-10-21 14:03:17 +02:00
Federico Builes b5c3d1e723 Update scan_pr to support loading an external config YAML file. 2022-10-21 14:00:52 +02:00
Federico Builes 7fd272118a Updating scan_pr to support a config file option. 2022-10-21 13:55:52 +02:00
Federico Builes 3c9a31f5a0 Updating CONTRIBUTING.md 2022-10-21 13:36:00 +02:00
Federico Builes d8fba3fdc1 Remove hardcode file from .gitignore 2022-10-21 13:33:24 +02:00
Federico Builes e805dd89e8 Merge branch 'main' into cn/scan_pr 2022-10-21 13:27:09 +02:00
Federico BuilesandGitHub 32276cb73d Merge pull request #298 from actions/dependabot/npm_and_yarn/types/node-16.11.68 
Bump @types/node from 16.11.66 to 16.11.68
 2022-10-19 07:49:08 +02:00
Federico BuilesandGitHub fe226ac019 Merge pull request #297 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.3 
Bump eslint-plugin-jest from 27.1.2 to 27.1.3
 2022-10-19 07:48:52 +02:00
Federico BuilesandGitHub 6f32cb0afd Merge pull request #296 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.1 
Bump @typescript-eslint/parser from 5.40.0 to 5.40.1
 2022-10-18 10:05:25 +02:00
Federico BuilesandGitHub a8b5c8c24e Merge pull request #295 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.1 
Bump @typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1
 2022-10-18 08:53:31 +02:00
Federico BuilesandGitHub 917e5af203 Merge pull request #291 from actions/dependabot/npm_and_yarn/types/node-16.11.66 
Bump @types/node from 16.11.65 to 16.11.66
 2022-10-17 07:28:53 +02:00
Federico BuilesandGitHub ba6dba6225 Merge pull request #292 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.2 
Bump eslint-plugin-jest from 27.1.1 to 27.1.2
 2022-10-17 07:26:25 +02:00
Federico BuilesandGitHub 0e5d083be1 Merge pull request #289 from actions/dependabot/npm_and_yarn/octokit-2.0.9 
Bump octokit from 2.0.7 to 2.0.9
 2022-10-14 09:09:30 +02:00
Federico Builes 2f428eec67 adding dist 2022-10-14 09:03:58 +02:00
Federico BuilesandGitHub 12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 
Bump @octokit/request-error from 3.0.1 to 3.0.2
 2022-10-14 08:55:30 +02:00
Federico BuilesandGitHub f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback 
Use GH Licenses API to retrieve null licenses
 2022-10-13 16:54:33 +02:00
Federico BuilesChristine NagadyaHenri Maurer
 		7e41a6f1ee Removing unnecessary beforeAll block 
Mocks are removed in Jest automatically due to our
Jest config file.

Co-authored-by: Christine Nagadya <[email protected]>
Co-authored-by: Henri Maurer <[email protected]>
 2022-10-13 16:52:54 +02:00
Federico BuilesandGitHub 0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 
Bump ansi-styles from 6.2.0 to 6.2.1
 2022-10-13 12:28:39 +02:00
Federico Builes 129f0ad973 adding dist 2022-10-13 12:26:58 +02:00
Federico BuilesandGitHub 18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 
Bump got from 12.5.1 to 12.5.2
 2022-10-13 08:12:07 +02:00
Federico BuilesandGitHub 94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 
Bump eslint-plugin-github from 4.3.7 to 4.4.0
 2022-10-12 08:05:50 +02:00
Federico BuilesandGitHub 577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 
Bump ansi-styles from 6.1.1 to 6.2.0
 2022-10-12 08:02:05 +02:00
Federico Builes 9ce6cb532b adding dist 2022-10-12 08:01:53 +02:00
Federico BuilesandGitHub f076f221f4 Merge pull request #280 from actions/format-bugs 
Fix display issues with versions and GHSAs
 2022-10-11 15:22:44 +02:00
Federico Builes 88b817ec8d adding dist 2022-10-11 15:20:02 +02:00
Federico BuilesandChristine Nagadya 2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <[email protected]>
 2022-10-11 15:17:34 +02:00
Federico Builes 1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes f632f5f79d adding dist 2022-10-11 14:51:27 +02:00
Federico Builes ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico BuilesandGitHub 6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 
Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0
 2022-10-11 12:11:26 +02:00
Federico BuilesandGitHub 5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 
Bump @typescript-eslint/parser from 5.39.0 to 5.40.0
 2022-10-11 12:09:15 +02:00
Federico BuilesandGitHub 463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 
Bump @types/node from 16.11.64 to 16.11.65
 2022-10-11 10:50:05 +02:00
Federico BuilesandGitHub 4c14cfe593 Merge pull request #275 from actions/dependabot/npm_and_yarn/eslint-8.25.0 
Bump eslint from 8.24.0 to 8.25.0
 2022-10-10 08:24:07 +02:00
Federico BuilesandGitHub 81216f689b Merge pull request #274 from actions/dependabot/npm_and_yarn/yaml-2.1.3 
Bump yaml from 2.1.2 to 2.1.3
 2022-10-06 14:43:54 +02:00
Federico Builes afbc15c97f updating dist files 2022-10-06 14:41:07 +02:00
Federico BuilesandGitHub cdad98596a Merge pull request #273 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.1 
Bump eslint-plugin-jest from 27.1.0 to 27.1.1
 2022-10-06 13:18:40 +02:00
Federico BuilesandGitHub df3ceaf7f0 Merge pull request #269 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.39.0 
Bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0
 2022-10-05 13:17:37 +02:00
Federico BuilesandGitHub 584e620d09 Merge pull request #270 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.39.0 
Bump @typescript-eslint/parser from 5.38.1 to 5.39.0
 2022-10-05 13:00:23 +02:00
Federico BuilesandGitHub 1fa34689ad Merge pull request #271 from actions/dependabot/npm_and_yarn/types/node-16.11.64 
Bump @types/node from 16.11.63 to 16.11.64
 2022-10-05 13:00:15 +02:00
Federico BuilesandGitHub de2814d20e Merge pull request #272 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.0 
Bump eslint-plugin-jest from 27.0.4 to 27.1.0
 2022-10-05 08:17:58 +02:00
Federico BuilesandGitHub cc2a6ab32f Merge pull request #268 from actions/dependabot/npm_and_yarn/yaml-2.1.2 
Bump yaml from 2.1.1 to 2.1.2
 2022-10-03 11:32:30 +02:00
Federico Builes 5de8be4c40 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.1.2 
# Conflicts:
#	dist/index.js.map
 2022-10-03 11:31:02 +02:00
Federico Builes 1b8bd021a3 adding dist 2022-10-03 11:29:46 +02:00
Federico BuilesandGitHub 65d8cd176f Merge pull request #267 from actions/dependabot/npm_and_yarn/types/node-16.11.63 
Bump @types/node from 16.11.62 to 16.11.63
 2022-10-03 11:29:23 +02:00
Federico BuilesandGitHub 6d500ff869 Merge pull request #266 from actions/dependabot/npm_and_yarn/actions/github-5.1.1 
Bump @actions/github from 5.1.0 to 5.1.1
 2022-10-03 11:29:14 +02:00
Federico Builes 0259ed8420 add dist 2022-10-03 11:28:16 +02:00
Federico BuilesandGitHub ba85772f4b Merge pull request #265 from actions/dependabot/npm_and_yarn/actions/core-1.10.0 
Bump @actions/core from 1.9.1 to 1.10.0
 2022-09-30 09:09:00 +02:00
Federico Builes 8d812df813 adding dist 2022-09-30 09:07:38 +02:00
Federico BuilesandGitHub 0385b5b162 Merge pull request #248 from actions/add-scanned-deps 
Add scanned deps
 2022-09-28 10:53:37 +02:00
Federico BuilesandGitHub 8e053e0f5e Merge pull request #262 from actions/dependabot/npm_and_yarn/typescript-4.8.4 
Bump typescript from 4.8.3 to 4.8.4
 2022-09-28 08:04:35 +02:00
Federico BuilesandGitHub e0ff0cf732 Merge pull request #261 from actions/dependabot/npm_and_yarn/got-12.5.1 
Bump got from 12.5.0 to 12.5.1
 2022-09-28 08:04:26 +02:00
Federico Builes 468485fc8e Clean up the main script a bit. 2022-09-27 12:25:12 +02:00
Federico Builes 46c9f79a1f Create utils.ts file for helper functions. 2022-09-27 12:23:05 +02:00
Federico Builes cd3f55e8f9 Add all the dependencies to the review summary too. 2022-09-27 11:52:15 +02:00
Federico BuilesandGitHub f832351766 Merge pull request #258 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.38.1 
Bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.38.1
 2022-09-27 08:10:02 +02:00
Federico BuilesandGitHub 629703a27b Merge pull request #260 from actions/dependabot/npm_and_yarn/types/node-16.11.62 
Bump @types/node from 16.11.60 to 16.11.62
 2022-09-27 08:08:06 +02:00
Federico BuilesandGitHub d05bfb69a5 Merge pull request #259 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.38.1 
Bump @typescript-eslint/parser from 5.38.0 to 5.38.1
 2022-09-27 08:07:40 +02:00
Federico Builes 0515f5cb39 Adding a skeleton for scanned dependencies in the summary. 2022-09-26 19:14:04 +02:00
Federico Builes 2d1d679f58 Move manifest grouping outside main.ts 2022-09-26 19:13:25 +02:00
Federico Builes a3563a05bc Use a set instead of raw JS objects. 2022-09-26 12:41:16 +02:00
Federico Builes 8a20ddbf25 try adding 3 sections 2022-09-26 12:21:24 +02:00
Federico Builes 2a646668d9 adding dist 2022-09-26 12:03:34 +02:00
Federico Builes 60be833ffd Update manifest formatting in output. 2022-09-26 12:01:39 +02:00
Federico Builes edc501a219 adding dist 2022-09-26 11:41:40 +02:00
Federico Builes 000837f2ac Don't nest groups. 2022-09-26 11:41:02 +02:00
Federico Builes 89f99d150a adding colors to the dep output 2022-09-26 11:35:05 +02:00
Federico Builes 0ed41eff02 Merge branch 'main' into add-scanned-deps 2022-09-26 11:34:43 +02:00
Federico Builes dbe70eb550 updating gitignore 2022-09-26 11:29:22 +02:00
Federico Builes 78c7c01396 Merge branch 'main' into add-scanned-deps 
# Conflicts:
#	dist/index.js.map
 2022-09-26 08:47:23 +02:00
Federico BuilesandGitHub 89a5c76329 Merge pull request #254 from actions/dependabot/npm_and_yarn/actions/github-5.1.0 
Bump @actions/github from 5.0.3 to 5.1.0
 2022-09-26 08:46:18 +02:00
Federico Builes 4a6d691283 adding dist 2022-09-26 08:45:09 +02:00
Federico BuilesandGitHub b58d457243 Merge pull request #253 from actions/dependabot/npm_and_yarn/types/node-16.11.60 
Bump @types/node from 16.11.59 to 16.11.60
 2022-09-26 08:42:47 +02:00
Federico BuilesandGitHub cc033856be Merge pull request #255 from actions/dependabot/npm_and_yarn/eslint-8.24.0 
Bump eslint from 8.23.1 to 8.24.0
 2022-09-26 08:04:38 +02:00
Federico Builes 8ec13c1f01 adding dist 2022-09-22 16:52:03 +02:00
Federico Builes 723ec8c0d3 Try showing information about the scanned dependencies. 2022-09-22 16:49:45 +02:00