actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
595 Commits 90 Branches 61 Tags
dff2fdff0fa7541faeb63f712ccbf95b7206350b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 
Bump @octokit/request-error from 3.0.1 to 3.0.2
 2022-10-14 08:55:30 +02:00
Federico BuilesandGitHub f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback 
Use GH Licenses API to retrieve null licenses
 2022-10-13 16:54:33 +02:00
Federico BuilesChristine NagadyaHenri Maurer
 		7e41a6f1ee Removing unnecessary beforeAll block 
Mocks are removed in Jest automatically due to our
Jest config file.

Co-authored-by: Christine Nagadya <[email protected]>
Co-authored-by: Henri Maurer <[email protected]>
 2022-10-13 16:52:54 +02:00
Federico BuilesandGitHub 0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 
Bump ansi-styles from 6.2.0 to 6.2.1
 2022-10-13 12:28:39 +02:00
Federico Builes 129f0ad973 adding dist 2022-10-13 12:26:58 +02:00
Federico BuilesandGitHub 18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 
Bump got from 12.5.1 to 12.5.2
 2022-10-13 08:12:07 +02:00
Federico BuilesandGitHub 94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 
Bump eslint-plugin-github from 4.3.7 to 4.4.0
 2022-10-12 08:05:50 +02:00
Federico BuilesandGitHub 577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 
Bump ansi-styles from 6.1.1 to 6.2.0
 2022-10-12 08:02:05 +02:00
Federico Builes 9ce6cb532b adding dist 2022-10-12 08:01:53 +02:00
Federico BuilesandGitHub f076f221f4 Merge pull request #280 from actions/format-bugs 
Fix display issues with versions and GHSAs
 2022-10-11 15:22:44 +02:00
Federico Builes 88b817ec8d adding dist 2022-10-11 15:20:02 +02:00
Federico BuilesandChristine Nagadya 2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <[email protected]>
 2022-10-11 15:17:34 +02:00
Federico Builes 1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes f632f5f79d adding dist 2022-10-11 14:51:27 +02:00
Federico Builes ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico BuilesandGitHub 6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 
Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0
 2022-10-11 12:11:26 +02:00
Federico BuilesandGitHub 5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 
Bump @typescript-eslint/parser from 5.39.0 to 5.40.0
 2022-10-11 12:09:15 +02:00
Federico BuilesandGitHub 463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 
Bump @types/node from 16.11.64 to 16.11.65
 2022-10-11 10:50:05 +02:00
Federico BuilesandGitHub 4c14cfe593 Merge pull request #275 from actions/dependabot/npm_and_yarn/eslint-8.25.0 
Bump eslint from 8.24.0 to 8.25.0
 2022-10-10 08:24:07 +02:00
Federico BuilesandGitHub 81216f689b Merge pull request #274 from actions/dependabot/npm_and_yarn/yaml-2.1.3 
Bump yaml from 2.1.2 to 2.1.3
 2022-10-06 14:43:54 +02:00
Federico Builes afbc15c97f updating dist files 2022-10-06 14:41:07 +02:00
Federico BuilesandGitHub cdad98596a Merge pull request #273 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.1 
Bump eslint-plugin-jest from 27.1.0 to 27.1.1
 2022-10-06 13:18:40 +02:00
Federico BuilesandGitHub df3ceaf7f0 Merge pull request #269 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.39.0 
Bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0
 2022-10-05 13:17:37 +02:00
Federico BuilesandGitHub 584e620d09 Merge pull request #270 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.39.0 
Bump @typescript-eslint/parser from 5.38.1 to 5.39.0
 2022-10-05 13:00:23 +02:00
Federico BuilesandGitHub 1fa34689ad Merge pull request #271 from actions/dependabot/npm_and_yarn/types/node-16.11.64 
Bump @types/node from 16.11.63 to 16.11.64
 2022-10-05 13:00:15 +02:00
Federico BuilesandGitHub de2814d20e Merge pull request #272 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.0 
Bump eslint-plugin-jest from 27.0.4 to 27.1.0
 2022-10-05 08:17:58 +02:00
Federico BuilesandGitHub cc2a6ab32f Merge pull request #268 from actions/dependabot/npm_and_yarn/yaml-2.1.2 
Bump yaml from 2.1.1 to 2.1.2
 2022-10-03 11:32:30 +02:00
Federico Builes 5de8be4c40 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.1.2 
# Conflicts:
#	dist/index.js.map
 2022-10-03 11:31:02 +02:00
Federico Builes 1b8bd021a3 adding dist 2022-10-03 11:29:46 +02:00
Federico BuilesandGitHub 65d8cd176f Merge pull request #267 from actions/dependabot/npm_and_yarn/types/node-16.11.63 
Bump @types/node from 16.11.62 to 16.11.63
 2022-10-03 11:29:23 +02:00
Federico BuilesandGitHub 6d500ff869 Merge pull request #266 from actions/dependabot/npm_and_yarn/actions/github-5.1.1 
Bump @actions/github from 5.1.0 to 5.1.1
 2022-10-03 11:29:14 +02:00
Federico Builes 0259ed8420 add dist 2022-10-03 11:28:16 +02:00
Federico BuilesandGitHub ba85772f4b Merge pull request #265 from actions/dependabot/npm_and_yarn/actions/core-1.10.0 
Bump @actions/core from 1.9.1 to 1.10.0
 2022-09-30 09:09:00 +02:00
Federico Builes 8d812df813 adding dist 2022-09-30 09:07:38 +02:00
Federico BuilesandGitHub 0385b5b162 Merge pull request #248 from actions/add-scanned-deps 
Add scanned deps
 2022-09-28 10:53:37 +02:00
Federico BuilesandGitHub 8e053e0f5e Merge pull request #262 from actions/dependabot/npm_and_yarn/typescript-4.8.4 
Bump typescript from 4.8.3 to 4.8.4
 2022-09-28 08:04:35 +02:00
Federico BuilesandGitHub e0ff0cf732 Merge pull request #261 from actions/dependabot/npm_and_yarn/got-12.5.1 
Bump got from 12.5.0 to 12.5.1
 2022-09-28 08:04:26 +02:00
Federico Builes 468485fc8e Clean up the main script a bit. 2022-09-27 12:25:12 +02:00
Federico Builes 46c9f79a1f Create utils.ts file for helper functions. 2022-09-27 12:23:05 +02:00
Federico Builes cd3f55e8f9 Add all the dependencies to the review summary too. 2022-09-27 11:52:15 +02:00
Federico BuilesandGitHub f832351766 Merge pull request #258 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.38.1 
Bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.38.1
 2022-09-27 08:10:02 +02:00
Federico BuilesandGitHub 629703a27b Merge pull request #260 from actions/dependabot/npm_and_yarn/types/node-16.11.62 
Bump @types/node from 16.11.60 to 16.11.62
 2022-09-27 08:08:06 +02:00
Federico BuilesandGitHub d05bfb69a5 Merge pull request #259 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.38.1 
Bump @typescript-eslint/parser from 5.38.0 to 5.38.1
 2022-09-27 08:07:40 +02:00
Federico Builes 0515f5cb39 Adding a skeleton for scanned dependencies in the summary. 2022-09-26 19:14:04 +02:00
Federico Builes 2d1d679f58 Move manifest grouping outside main.ts 2022-09-26 19:13:25 +02:00
Federico Builes a3563a05bc Use a set instead of raw JS objects. 2022-09-26 12:41:16 +02:00
Federico Builes 8a20ddbf25 try adding 3 sections 2022-09-26 12:21:24 +02:00
Federico Builes 2a646668d9 adding dist 2022-09-26 12:03:34 +02:00
Federico Builes 60be833ffd Update manifest formatting in output. 2022-09-26 12:01:39 +02:00
Federico Builes edc501a219 adding dist 2022-09-26 11:41:40 +02:00
Federico Builes 000837f2ac Don't nest groups. 2022-09-26 11:41:02 +02:00
Federico Builes 89f99d150a adding colors to the dep output 2022-09-26 11:35:05 +02:00
Federico Builes 0ed41eff02 Merge branch 'main' into add-scanned-deps 2022-09-26 11:34:43 +02:00
Federico Builes dbe70eb550 updating gitignore 2022-09-26 11:29:22 +02:00
Federico Builes 78c7c01396 Merge branch 'main' into add-scanned-deps 
# Conflicts:
#	dist/index.js.map
 2022-09-26 08:47:23 +02:00
Federico BuilesandGitHub 89a5c76329 Merge pull request #254 from actions/dependabot/npm_and_yarn/actions/github-5.1.0 
Bump @actions/github from 5.0.3 to 5.1.0
 2022-09-26 08:46:18 +02:00
Federico Builes 4a6d691283 adding dist 2022-09-26 08:45:09 +02:00
Federico BuilesandGitHub b58d457243 Merge pull request #253 from actions/dependabot/npm_and_yarn/types/node-16.11.60 
Bump @types/node from 16.11.59 to 16.11.60
 2022-09-26 08:42:47 +02:00
Federico BuilesandGitHub cc033856be Merge pull request #255 from actions/dependabot/npm_and_yarn/eslint-8.24.0 
Bump eslint from 8.23.1 to 8.24.0
 2022-09-26 08:04:38 +02:00
Federico Builes 8ec13c1f01 adding dist 2022-09-22 16:52:03 +02:00
Federico Builes 723ec8c0d3 Try showing information about the scanned dependencies. 2022-09-22 16:49:45 +02:00
Federico Builes 2843194510 Updating version. 2022-09-22 14:27:24 +02:00
Federico BuilesandGitHub 6944531f76 Update README.md 2022-09-22 14:26:27 +02:00
Federico BuilesandGitHub 29cdbbed37 Merge pull request #228 from actions/external-config 
Add external configuration file
 2022-09-22 14:22:39 +02:00
Federico BuilesGitHubSarah Aladetan
 		88502badc9 Update README.md 
Co-authored-by: Sarah Aladetan <[email protected]>
 2022-09-22 08:03:23 +02:00
Federico Builes ff7c97a976 adding dist 2022-09-21 17:03:01 +02:00
Federico Builes 4d3b8e5269 Clarify code a bit. 2022-09-21 17:01:00 +02:00
Federico Builes 38ee6e8360 Improve scopes example in new docs. 2022-09-21 16:53:20 +02:00
Federico Builes 54cd9a7cba Merge branch 'main' into external-config 
# Conflicts:
#	README.md
#	__tests__/config.test.ts
#	dist/index.js.map
#	src/config.ts
#	src/schemas.ts
 2022-09-21 16:50:02 +02:00
Federico Builes c4693c00ac Raise errors for invalid values in the external config. 2022-09-21 16:30:05 +02:00
Federico Builes eef7e39202 Accept options from both sources, prioritize external config. 2022-09-20 15:52:34 +02:00
Federico Builes 37dc32836b Merge branch 'main' into external-config 2022-09-20 15:29:28 +02:00
Federico Builes 890361387d Updating dist. 2022-09-20 15:16:25 +02:00
Federico Builes 61f19e6447 Let the users set the path for the config file. 2022-09-20 15:15:14 +02:00
Federico BuilesandGitHub fd959624bf Merge pull request #245 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.38.0 
Bump @typescript-eslint/eslint-plugin from 5.37.0 to 5.38.0
 2022-09-20 07:59:56 +02:00
Federico BuilesandGitHub 11dd186eb0 Merge pull request #246 from actions/dependabot/npm_and_yarn/got-12.5.0 
Bump got from 12.4.1 to 12.5.0
 2022-09-20 07:59:44 +02:00
Federico BuilesandGitHub 8a8fa8bd07 Merge pull request #244 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.38.0 
Bump @typescript-eslint/parser from 5.37.0 to 5.38.0
 2022-09-20 07:53:39 +02:00
Federico Builes aeb9ff5438 adding dist 2022-09-19 17:34:53 +02:00
Federico Builes 1ef21ab130 Leave a failing test for tomorrow! 2022-09-19 17:34:12 +02:00
Federico Builes 3c95902dd6 Adding more tests for the config file. 2022-09-19 17:29:25 +02:00
Federico Builes 4b4ec08f7b Make sure we get rid of the ridiculous dashes in the names. 2022-09-19 17:28:59 +02:00
Federico Builes a91c3ac205 Split reading inline/external configuration options. 2022-09-19 17:28:44 +02:00
Federico Builes bf0cb7fac4 Add a default config file. 2022-09-19 17:28:20 +02:00
Federico Builes 07a7056819 Update README to include config-file option. 2022-09-19 16:46:42 +02:00
Federico Builes b93fcee7ff Raise an error if the config file is not found. 2022-09-19 16:36:45 +02:00
Federico Builes 8bac022bfd Merge branch 'main' into external-config 2022-09-19 16:14:41 +02:00
Federico BuilesandGitHub fc4fb55b25 Merge pull request #241 from actions/dependabot/npm_and_yarn/nodemon-2.0.20 
Bump nodemon from 2.0.19 to 2.0.20
 2022-09-19 07:38:12 +02:00
Federico Builes 0ba71661e5 Adding failing tests. 2022-09-16 14:32:09 +02:00
Federico Builes 8ef181b2cb Read a hardcoded config file. 2022-09-16 14:30:57 +02:00
Federico Builes 7e2a489d03 Merge branch 'main' into external-config 2022-09-16 13:55:17 +02:00
Federico BuilesandGitHub eaeaeb3d57 Merge pull request #239 from actions/dependabot/npm_and_yarn/types/node-16.11.59 
Bump @types/node from 16.11.58 to 16.11.59
 2022-09-16 13:55:02 +02:00
Federico BuilesandGitHub 1eaf30e6eb Merge pull request #240 from actions/hm/fix-scan_pr 
Fix passing repo-token input in scan_pr script
 2022-09-16 13:50:52 +02:00
Federico Builes 5da3462152 Explain why we mangle dashed variables. 2022-09-16 13:47:16 +02:00
Federico BuilesandGitHub fd3a3b1051 Merge pull request #236 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.37.0 
Bump @typescript-eslint/parser from 5.36.2 to 5.37.0
 2022-09-13 07:16:16 +02:00
Federico BuilesandGitHub c7c07e1117 Merge pull request #237 from actions/dependabot/npm_and_yarn/eslint-8.23.1 
Bump eslint from 8.23.0 to 8.23.1
 2022-09-13 07:13:17 +02:00
Federico BuilesandGitHub 59fdb0cce7 Merge pull request #238 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.37.0 
Bump @typescript-eslint/eslint-plugin from 5.36.2 to 5.37.0
 2022-09-13 07:13:03 +02:00
Federico BuilesandGitHub eee2e3260e Merge pull request #235 from actions/dependabot/npm_and_yarn/ansi-styles-6.1.1 
Bump ansi-styles from 6.1.0 to 6.1.1
 2022-09-12 06:57:39 +02:00
Federico Builes 7eeddef885 adding dist 2022-09-12 06:56:41 +02:00
Federico Builes 8c58cdad09 Merge branch 'main' into dependabot/npm_and_yarn/ansi-styles-6.1.1 2022-09-12 06:56:12 +02:00
Federico BuilesandGitHub 380290a89b Merge pull request #234 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.0.4 
Bump eslint-plugin-jest from 27.0.2 to 27.0.4
 2022-09-12 06:54:43 +02:00