 Jon Janego
|
bc8dee91fe
|
Update CONTRIBUTING.md
being consistent about using forks, minor style updates
|
2024-06-04 09:58:59 -05:00 |
|
|
Jon Janego
|
0669e2939d
|
Update CONTRIBUTING.md
Co-authored-by: Barry Gordon <896971+brrygrdn@users.noreply.github.com>
|
2024-06-04 09:45:14 -05:00 |
|
|
Jon Janego
|
fd46ab736e
|
Update CONTRIBUTING.md
fixing example code for consistency
|
2024-06-04 09:01:11 -05:00 |
|
|
Jon Janego
|
551e0b82bd
|
Update CONTRIBUTING.md
fixing a sentence fragment
|
2024-06-04 08:59:20 -05:00 |
|
|
Jon Janego
|
fbfa3f19c8
|
Update SECURITY.md
linking to the main bounty site instead of h1
|
2024-06-03 16:59:30 -05:00 |
|
|
Jon Janego
|
4c5eeccebb
|
Update CONTRIBUTING.md
Adding some explanations about contribution standards and local development
|
2024-06-03 16:18:38 -05:00 |
|
|
Jon Janego
|
f6e67d2f8d
|
Merge pull request #776 from ramann/patch-1
fix show-openssf-scorecard-levels input
|
2024-06-03 12:54:46 -05:00 |
|
|
robert
|
eb0576373a
|
fix show-openssf-scorecard-levels input
The input in the README was wrong, I have fixed it to match action.yml.
|
2024-06-03 12:20:08 -04:00 |
|
|
Jon Janego
|
981e960c8c
|
Merge pull request #773 from am-stead/am-stead-patch-1
PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README
|
2024-05-30 09:23:53 -05:00 |
|
|
Anne-Marie
|
87b53ae475
|
add line break
|
2024-05-30 11:10:36 +00:00 |
|
|
Anne-Marie
|
c601a5a741
|
combining Output notes
|
2024-05-30 11:02:59 +00:00 |
|
|
Jon Janego
|
5751523f41
|
Update README.md
|
2024-05-29 13:21:44 -05:00 |
|
|
Anne-Marie
|
3fe3159bb9
|
Indenting to match vulnerable-changes
|
2024-05-27 09:15:58 +02:00 |
|
|
Anne-Marie
|
2d3c93c0e0
|
Update README.md
Co-authored-by: Jon Janego <jonjanego@github.com>
|
2024-05-27 09:14:01 +02:00 |
|
|
Anne-Marie
|
9770b8da2c
|
Update README.md
Co-authored-by: Jon Janego <jonjanego@github.com>
|
2024-05-27 09:13:46 +02:00 |
|
|
Anne-Marie
|
d5b8317942
|
edits
|
2024-05-24 07:35:18 +00:00 |
|
|
Anne-Marie
|
d3670a3e49
|
updating GHES links
|
2024-05-23 10:38:06 +00:00 |
|
|
Anne-Marie
|
f38966fbec
|
updating overview
|
2024-05-23 10:26:42 +00:00 |
|
|
Anne-Marie
|
9eb0dccbc9
|
editing configuration and remaining sections
|
2024-05-23 10:03:57 +00:00 |
|
|
Anne-Marie
|
258a2295c6
|
installation section
|
2024-05-23 09:37:47 +00:00 |
|
|
Anne-Marie
|
4c0a483c95
|
Update README.md
|
2024-05-23 10:22:01 +02:00 |
|
|
Eli Reisman
|
339e2e1bfc
|
Merge pull request #741 from josieang/deps-dev-v3
use the v3 version of the deps.dev API
|
2024-05-10 14:23:17 -07:00 |
|
|
Josie Anugerah
|
40cd879447
|
npm install && npm run build && npm run package
|
2024-05-07 08:11:58 +10:00 |
|
|
Josie Anugerah
|
d11eeb39d8
|
Merge branch 'main' into deps-dev-v3
|
2024-05-06 17:26:48 +10:00 |
|
|
Justin Holguín
|
82ab8f69c7
|
Merge pull request #765 from actions/juxtin/allow-slashes-in-purls
Allow slashes in purl package names
|
2024-05-02 13:30:20 -07:00 |
|
|
Justin Holguín
|
432d8e7efe
|
Allow slashes in purl package names
|
2024-05-02 19:11:08 +00:00 |
|
|
Justin Holguín
|
0c155c5e85
|
Merge pull request #762 from actions/juxtin/prepare-4.3.2
Update version number to 4.3.2
v4.3.2
|
2024-04-30 09:39:04 -07:00 |
|
|
Justin Holguín
|
f3dac32d35
|
Merge pull request #761 from actions/juxtin/fix-allow-dependencies-licenses
Fix package-url parsing for allow-dependencies-licenses
|
2024-04-30 09:38:44 -07:00 |
|
|
Justin Holguín
|
d0d5cc3ec4
|
Update version number to 4.3.2
|
2024-04-30 16:30:51 +00:00 |
|
|
Justin Holguín
|
49fbbe0acb
|
Fix package-url parsing for allow-dependencies-licenses
|
2024-04-29 23:24:15 +00:00 |
|
|
Justin Holguín
|
e58c696e52
|
Merge pull request #758 from actions/juxtin/prepare-4.3.1
Change version to 4.3.1
v4.3.0
v4.3.1
|
2024-04-29 10:48:18 -07:00 |
|
|
Justin Holguín
|
9b7c72ddcd
|
Change version to 4.3.1
|
2024-04-29 17:45:21 +00:00 |
|
|
Justin Holguín
|
7dcfabfea2
|
Merge pull request #753 from actions/juxtin/debug-purl
Parse purls cautiously in getDeniedChanges
|
2024-04-29 10:43:30 -07:00 |
|
|
Justin Holguín
|
5f0808ffb1
|
Validate that deny-packages purls are complete
|
2024-04-29 16:46:21 +00:00 |
|
|
Justin Holguín
|
fcc66c23b3
|
Refine purl parsing and tests
|
2024-04-28 20:33:37 +00:00 |
|
|
Justin Holguín
|
1dd418bcb3
|
Basic tests for PURL validation in config
|
2024-04-27 22:16:46 +00:00 |
|
|
Justin Holguín
|
640617990f
|
Replace packageurl-js with our own implementation
|
2024-04-27 21:26:06 +00:00 |
|
|
Justin Holguín
|
2034babb6b
|
Bypass purls (mostly) for deny checks
|
2024-04-26 23:17:11 +00:00 |
|
|
Justin Holguín
|
7e773b1e98
|
Log offending purl
|
2024-04-26 21:50:12 +00:00 |
|
|
Justin Holguín
|
a3460920cc
|
Parse purls cautiously in getDeniedChanges
|
2024-04-26 21:28:24 +00:00 |
|
|
Justin Holguín
|
0659a74c94
|
Merge pull request #751 from actions/juxtin/release
Update version to 4.3.0 in preparation for release
V4.3.0
|
2024-04-26 10:26:45 -07:00 |
|
|
Justin Holguín
|
28facf5722
|
Update release instructions
|
2024-04-26 17:11:57 +00:00 |
|
|
Justin Holguín
|
5ab7b74146
|
Update package-lock.json
|
2024-04-26 17:11:46 +00:00 |
|
|
Josie Anugerah
|
2a28e93881
|
Merge branch 'main' into deps-dev-v3
|
2024-04-26 14:10:34 +10:00 |
|
|
Justin Holguín
|
95b6fa4e6b
|
Update version to 4.3.0
|
2024-04-25 22:41:44 +00:00 |
|
|
Brandon Teng
|
2dba7fdde1
|
Merge pull request #733 from actions/deny-list-version
deny-packages configuration option can deny specified version or all packages
|
2024-04-24 20:38:16 -05:00 |
|
|
Brandon Teng
|
7d44c7c392
|
building package with latest typescript version
|
2024-04-24 20:36:47 -05:00 |
|
|
Brandon Teng
|
ce31ee8325
|
Merge branch 'main' into deny-list-version
|
2024-04-24 18:16:35 -05:00 |
|
|
Justin Holguín
|
df1b3661fd
|
Merge pull request #750 from actions/juxtin/fix-deny-icon
Show denied packages with red X
|
2024-04-24 15:37:25 -07:00 |
|
|
Brandon Teng
|
71c57a6108
|
Merge branch 'main' into deny-list-version
|
2024-04-24 17:19:53 -05:00 |
|