actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
182 Commits 90 Branches 61 Tags
cc3101831da8d4a0dae2ec73e55bb57ce33507a3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes cc3101831d Updating dist. 2022-06-14 07:04:33 +02:00
Federico Builes ef97470a0f Don't set the defaults in the test :/ 2022-06-14 07:04:26 +02:00
Federico Builes efecf6fd09 Remove the variables from env so they don't default to empty strings. 2022-06-14 06:49:18 +02:00
Federico Builes 24d7ef3c5d Use an empty config options type. 2022-06-14 06:48:58 +02:00
Federico Builes 01fa67b82e adding dist 2022-06-14 06:26:18 +02:00
Federico Builes 1791775ce6 temp commit 2022-06-14 05:57:43 +02:00
Federico BuilesandGitHub 92f1ecaaea Merge pull request #106 from actions/adding-lists 
Adding allow and deny lists
 2022-06-14 04:45:37 +02:00
Federico BuilesandGitHub 47d4ff9127 Merge pull request #111 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.28.0 
Bump @typescript-eslint/parser from 5.27.1 to 5.28.0
 2022-06-14 04:45:19 +02:00
Federico BuilesandGitHub d616ba30f2 Merge pull request #110 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.28.0 
Bump @typescript-eslint/eslint-plugin from 5.27.1 to 5.28.0
 2022-06-14 04:43:24 +02:00
Federico Builes eebebcdc2a Use real PURLs in tests 2022-06-13 20:19:01 +02:00
Federico Builes 571f236610 Improved wording on license messages. 2022-06-13 20:08:16 +02:00
Federico Builes fe78920139 Document unwanted behavior for a future refactoring. 2022-06-13 20:04:39 +02:00
Federico BuilesandGitHub bd115a9b66 Merge pull request #108 from actions/dependabot/npm_and_yarn/types/node-17.0.42 
Bump @types/node from 17.0.40 to 17.0.42
 2022-06-13 11:36:18 +02:00
Federico Builes 21412fec7b fixing dist check 2022-06-09 10:46:00 +02:00
Federico Builes 0777fbe61e Updating dist. 2022-06-09 10:42:56 +02:00
Federico Builes cc22dcd654 Use undefined instead of null when dealing with lists. 2022-06-09 10:42:31 +02:00
Federico Builes 6b5518a9ed Adding more docs to licenses.ts 2022-06-09 10:33:05 +02:00
Federico Builes 20cca5c0c4 The default settings should not use []. 2022-06-08 18:28:10 +02:00
Federico Builes a51db20961 Use null for unspecified values when filtering licenses. 2022-06-08 18:21:28 +02:00
Federico Builes a7d02aef82 adding dist 2022-06-08 17:47:06 +02:00
Federico Builes 4ac3d318ab Refactoring on PR feedback. 2022-06-08 17:45:42 +02:00
Federico Builes 25271922eb Clarify variable names. 2022-06-08 15:53:14 +02:00
Federico Builes 4474253eb8 Merge branch 'main' into adding-lists 2022-06-07 06:23:53 +02:00
Federico BuilesandGitHub 1a7225bc91 Merge pull request #104 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.1 
Bump @typescript-eslint/parser from 5.27.0 to 5.27.1
 2022-06-07 06:20:33 +02:00
Federico BuilesandGitHub 4ebaca3419 Merge pull request #105 from actions/dependabot/npm_and_yarn/yaml-2.1.1 
Bump yaml from 2.1.0 to 2.1.1
 2022-06-07 06:20:17 +02:00
Federico Builes a96d28f120 Remove configuration docs until we have a proper release. 2022-06-07 06:19:22 +02:00
Federico BuilesandGitHub c187f6f12d Merge pull request #103 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.1 
Bump @typescript-eslint/eslint-plugin from 5.27.0 to 5.27.1
 2022-06-07 06:15:32 +02:00
Federico Builes 56e63b1bc5 adding dist 2022-06-06 20:32:46 +02:00
Federico Builes 2ae9a2d51b Add logic for denied licenses. 2022-06-06 20:32:46 +02:00
Federico Builes 1261e18905 Clarify license tests. 2022-06-06 20:32:46 +02:00
Federico Builes dc7b0a2788 Show an error when disallowed dependencies show up. 2022-06-06 20:32:46 +02:00
Federico Builes 06297bf229 Fixing failing tests 2022-06-06 20:32:46 +02:00
Federico Builes bccacf9708 Skeleton for license validation. 2022-06-06 20:32:46 +02:00
Federico Builes 8c646c1c91 Get rid of redundant variables. 2022-06-06 20:32:46 +02:00
Federico BuilesandGitHub 30c4549c8c Merge pull request #91 from actions/adding-config-file 
Adding configuration options
 2022-06-06 20:32:21 +02:00
Federico BuilesandGitHub 93c8cb2c8a Merge pull request #101 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.5.3 
Bump eslint-plugin-jest from 26.4.6 to 26.5.3
 2022-06-06 13:43:17 +02:00
Federico BuilesandGitHub d7c6d6203f Merge pull request #100 from actions/dependabot/npm_and_yarn/esbuild-register-3.3.3 
Bump esbuild-register from 3.3.2 to 3.3.3
 2022-06-06 13:34:38 +02:00
Federico BuilesandGitHub 545050ada5 Merge pull request #99 from actions/dependabot/npm_and_yarn/eslint-8.17.0 
Bump eslint from 8.16.0 to 8.17.0
 2022-06-06 13:31:00 +02:00
Federico BuilesandGitHub 2b674f0e26 Merge pull request #98 from actions/dependabot/npm_and_yarn/types/node-17.0.40 
Bump @types/node from 17.0.38 to 17.0.40
 2022-06-06 13:30:45 +02:00
Federico BuilesandGitHub 802525536f Merge pull request #97 from actions/dependabot/npm_and_yarn/typescript-4.7.3 
Bump typescript from 4.7.2 to 4.7.3
 2022-06-06 13:30:28 +02:00
Federico Builes 2f38c7e78c Add severity level to the vulns not found message. 2022-06-01 15:56:16 +02:00
Federico Builes c235374b9d Removing redundant test. 2022-06-01 13:42:22 +02:00
Federico Builes ae2949c9c1 Removing old file. 2022-06-01 13:40:09 +02:00
Federico Builes 3ae540bf96 Updating the README with config instructions. 2022-06-01 13:39:05 +02:00
Federico Builes 1c15a1745e Adding dependency-review.yml. 2022-06-01 13:38:42 +02:00
Federico Builes 19b36f0933 Use a more definitive name for the config file. 2022-06-01 13:28:03 +02:00
Federico Builes 0b9547aabf Adding more expectations for severities. 2022-06-01 13:14:32 +02:00
Federico Builes b327132e4b Remove state from the filtering function. 2022-06-01 13:10:58 +02:00
Federico Builes f9a13e70f4 Fixing circular reference, adding prettier. 2022-06-01 12:09:11 +02:00
Federico Builes db9f724163 Introduce a schema for ConfigurationOptions. 
This commit illustrates an approach, but is currently
failing the tests.
 2022-06-01 06:36:02 +02:00
Federico Builes 7db11574b7 Make vulnerabilities be [] by default. 2022-06-01 05:36:46 +02:00
Federico Builes 7063d0ca45 Don't modify array in place. 2022-06-01 05:32:50 +02:00
Federico Builes 2dd55385c1 Use let instead of var, fix failing test. 2022-06-01 05:31:33 +02:00
Federico BuilesandGitHub 48729e4e38 Merge pull request #96 from actions/dependabot/npm_and_yarn/types/node-17.0.38 
Bump @types/node from 17.0.36 to 17.0.38
 2022-06-01 04:48:28 +02:00
Federico Builes 4235242818 adding dist files 2022-05-31 17:09:21 +02:00
Federico Builes 731e67eca2 Add filtering by low severity as the default. 2022-05-31 17:08:22 +02:00
Federico Builes b601c09c4e Merge branch 'main' into adding-config-file 2022-05-31 16:59:33 +02:00
Federico Builes 982e1d16cb Whitespace and newlines. 2022-05-31 16:54:59 +02:00
Federico Builes f0a04841ce Adding logic to filter by vulnerability severity. 2022-05-31 16:50:39 +02:00
Federico Builes e622e72c6f Export Change schema. 2022-05-31 06:06:19 +02:00
Federico Builes 92e40d7290 Move printing function out. 2022-05-31 06:03:42 +02:00
Federico BuilesandGitHub 21763d05e0 Merge pull request #94 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.4.6 
Bump eslint-plugin-jest from 26.4.5 to 26.4.6
 2022-05-31 05:25:05 +02:00
Federico BuilesandGitHub 2c245d1aba Merge pull request #93 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.0 
Bump @typescript-eslint/parser from 5.26.0 to 5.27.0
 2022-05-31 05:24:37 +02:00
Federico BuilesandGitHub 088fc4d4e8 Merge pull request #92 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.0 
Bump @typescript-eslint/eslint-plugin from 5.26.0 to 5.27.0
 2022-05-31 05:21:37 +02:00
Federico Builes 0b73ead548 Merge branch 'main' into adding-config-file 2022-05-30 06:37:29 +02:00
Federico BuilesandGitHub 67a046c994 Merge pull request #89 from actions/dependabot/npm_and_yarn/types/node-17.0.36 
Bump @types/node from 17.0.35 to 17.0.36
 2022-05-30 06:30:17 +02:00
Federico BuilesandGitHub 64c25ba2f4 Merge pull request #90 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.4.5 
Bump eslint-plugin-jest from 26.2.2 to 26.4.5
 2022-05-30 06:30:05 +02:00
Federico Builes a8dcc6b774 Adding basic config file parsing and some test scaffolding. 2022-05-26 15:54:59 -07:00
Federico Builes d09b96a7b1 Updating YAML deps. 2022-05-26 14:49:02 -07:00
Federico BuilesandGitHub 243561faa0 Merge pull request #87 from actions/dependabot/npm_and_yarn/vercel/ncc-0.34.0 
Bump @vercel/ncc from 0.33.4 to 0.34.0
 2022-05-26 10:47:33 -07:00
Federico BuilesandGitHub 860cc21fc2 Merge pull request #86 from actions/dependabot/npm_and_yarn/got-12.1.0 
Bump got from 12.0.4 to 12.1.0
 2022-05-26 10:47:20 -07:00
Federico BuilesandGitHub 737f9b3a71 Merge pull request #85 from actions/dependabot/npm_and_yarn/typescript-4.7.2 
Bump typescript from 4.6.4 to 4.7.2
 2022-05-25 10:57:24 -07:00
Federico BuilesandGitHub 2b78124491 Merge pull request #83 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.26.0 
Bump @typescript-eslint/eslint-plugin from 5.25.0 to 5.26.0
 2022-05-24 16:21:37 -07:00
Federico BuilesandGitHub 365fad2034 Merge pull request #82 from actions/dependabot/npm_and_yarn/zod-3.17.3 
Bump zod from 3.17.2 to 3.17.3
 2022-05-24 14:54:41 -07:00
Federico Builes 31314537ae adding dist files 2022-05-24 14:52:45 -07:00
Federico BuilesandGitHub a9c83d3af6 Merge pull request #81 from actions/elireisman/fix-default-case 
Fix default-case in error handling
 2022-05-23 12:30:51 -07:00
Federico BuilesandGitHub 0be808458e Merge pull request #80 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.26.0 
Bump @typescript-eslint/parser from 5.24.0 to 5.26.0
 2022-05-23 11:20:37 -07:00
Federico BuilesandGitHub 77396f2e4f Merge pull request #79 from actions/dependabot/npm_and_yarn/zod-3.17.2 
Bump zod from 3.16.0 to 3.17.2
 2022-05-23 11:19:59 -07:00
Federico Builes 9bc6bded9e updating dist 2022-05-23 11:18:56 -07:00
Federico BuilesandGitHub cdae254423 Merge pull request #78 from actions/dependabot/npm_and_yarn/eslint-8.16.0 
Bump eslint from 8.15.0 to 8.16.0
 2022-05-23 11:14:59 -07:00
Federico BuilesandGitHub a257e84a2f Merge pull request #77 from actions/dependabot/npm_and_yarn/types/node-17.0.35 
Bump @types/node from 17.0.33 to 17.0.35
 2022-05-23 11:14:38 -07:00
Federico BuilesandGitHub e4396493ba Merge pull request #73 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.25.0 
Bump @typescript-eslint/eslint-plugin from 5.24.0 to 5.25.0
 2022-05-23 11:03:13 -07:00
Federico BuilesandGitHub 5ce46b3424 Merge pull request #65 from actions/update-readme 
Update README to include GHAS instructions
 2022-05-16 14:20:09 -07:00
Federico BuilesandGitHub 9680f24ea3 Merge pull request #71 from actions/dependabot/npm_and_yarn/actions/github-5.0.3 
Bump @actions/github from 5.0.1 to 5.0.3
 2022-05-16 14:19:29 -07:00
Federico Builes 9cdb91e238 updating dist files 2022-05-16 14:17:47 -07:00
Federico BuilesandGitHub c91da44591 Merge pull request #67 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.2.2 
Bump eslint-plugin-jest from 26.1.5 to 26.2.2
 2022-05-16 14:13:20 -07:00
Federico BuilesandGitHub b988161c8f Merge pull request #70 from actions/updating-deps 
Updating NPM Dependencies
 2022-05-16 14:09:47 -07:00
Federico Builes a086ec5a2d updating dependencies 2022-05-16 14:06:20 -07:00
Federico BuilesandGitHub dcc694e92a Merge pull request #61 from actions/dependabot/npm_and_yarn/zod-3.16.0 
Bump zod from 3.15.1 to 3.16.0
 2022-05-16 14:04:47 -07:00
Federico Builes 7a2877d9c8 updating the dist folder 2022-05-16 14:02:08 -07:00
Federico Builes 265d6e12a9 updating README 2022-05-13 08:11:58 +02:00
Federico Builes 0e2b63f1f4 Cleaning up errors. 2022-05-12 18:07:14 +02:00
Federico Builes 0e9a322413 Move config into its own file. 2022-05-12 18:05:14 +02:00
Federico Builes fdcc204dbb Adding a YAML parser. 2022-05-12 18:04:51 +02:00
Federico Builes 871c00fde8 adding dist files 2022-05-12 11:44:25 +02:00
Federico Builes 52795b8e93 Print config files. 2022-05-12 11:43:08 +02:00
Federico BuilesandGitHub 744ab92b2c Merge pull request #62 from actions/update-hacking 
Update CONTRIBUTING.md
 2022-05-12 10:26:10 +02:00
Federico BuilesandGitHub 0b8c1ff0d6 Update CONTRIBUTING.md 2022-05-12 10:25:45 +02:00
Federico BuilesandGitHub 2fee08ee9a Merge pull request #55 from actions/dependabot/npm_and_yarn/eslint-8.15.0 
Bump eslint from 8.14.0 to 8.15.0
 2022-05-09 15:42:54 +02:00
Federico Builes 9571135e29 updating dist folder 2022-05-09 15:41:42 +02:00