actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
595 Commits 90 Branches 61 Tags
dff2fdff0fa7541faeb63f712ccbf95b7206350b
Commit Graph
595 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes 531da4bab3 Merge pull request #191 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.2 
Bump eslint-plugin-jest from 26.7.0 to 26.8.2
 2022-08-12 18:02:28 +02:00
Federico Builes a059506842 Merge pull request #188 from actions/dependabot/npm_and_yarn/actions/core-1.9.1 
Bump @actions/core from 1.9.0 to 1.9.1
 2022-08-12 18:01:43 +02:00
Federico Builes d8aff4cfce adding dist 2022-08-12 18:00:10 +02:00
dependabot[bot] 1069034a80 Bump eslint-plugin-jest from 26.7.0 to 26.8.2 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.7.0 to 26.8.2.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.7.0...v26.8.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-10 01:22:58 +00:00
dependabot[bot] 424d622090 Bump @typescript-eslint/parser from 5.32.0 to 5.33.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.32.0 to 5.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-09 01:36:41 +00:00
dependabot[bot] 979fe8f031 Bump @actions/core from 1.9.0 to 1.9.1 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-09 01:35:43 +00:00
dependabot[bot] ea4b93e2db Bump got from 12.3.0 to 12.3.1 
Bumps [got](https://github.com/sindresorhus/got) from 12.3.0 to 12.3.1.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.3.0...v12.3.1)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-08 01:50:21 +00:00
Tiago Pascoal 47f663b6ee update dist after fixing typo 2022-08-07 11:39:10 +00:00
Tiago PascoalandEric Cornelissen dfcdb87cb3 Fix typo 
Co-authored-by: Eric Cornelissen <[email protected]>
 2022-08-07 12:36:42 +01:00
Tiago Pascoal 79f5aede88 Merge branch 'main' into add-summary 2022-08-04 16:59:57 +01:00
Tiago Pascoal aef949f026 Show vulnerabities and license information on the job summary. 
Users can see the results that were found directly on the job summary

All the results are grouped by manifest.

It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.

Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
 2022-08-04 15:35:07 +00:00
Federico Builes 415088b56e Merge pull request #180 from actions/enterprise-docs 
Adding instructions for installing in GHES
 2022-08-03 17:28:05 +02:00
Federico BuilesandCourtney Claessens be18317f94 Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-08-03 17:27:39 +02:00
Courtney Claessens e20b197c93 adding info on licenses not supported for GHES 2022-08-03 10:46:47 -04:00
Federico Builes e66fd91484 Point to the 3.6 docs for Connect. 2022-08-03 11:29:50 +02:00
Federico Builes ea815ebddb Add link for GHAS. 2022-08-03 11:25:03 +02:00
Federico Builes bb3e014e0a Adding instructions for GHES 3.6. 2022-08-03 11:22:48 +02:00
Federico Builes 4317da3e38 Merge pull request #179 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.32.0 
Bump @typescript-eslint/parser from 5.31.0 to 5.32.0
 2022-08-02 10:46:34 +02:00
dependabot[bot] 2aa2a269c4 Bump @typescript-eslint/parser from 5.31.0 to 5.32.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.31.0 to 5.32.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.32.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 08:45:25 +00:00
Federico Builes 67562b4c74 Merge pull request #178 from actions/dependabot/npm_and_yarn/eslint-8.21.0 
Bump eslint from 8.20.0 to 8.21.0
 2022-08-02 10:44:48 +02:00
Federico Builes fe523440bc Merge pull request #177 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.32.0 
Bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0
 2022-08-02 10:44:39 +02:00
dependabot[bot] bddb4f4ac8 Bump eslint from 8.20.0 to 8.21.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.20.0 to 8.21.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.20.0...v8.21.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 01:32:02 +00:00
dependabot[bot] 951c4b6b47 Bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.31.0 to 5.32.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.32.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 01:31:50 +00:00
Federico Builes 90edb6f286 Merge pull request #174 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.7.0 
Bump eslint-plugin-jest from 26.6.0 to 26.7.0
 2022-08-01 17:33:21 +02:00
Federico Builes 76cb47a13a Merge pull request #175 from actions/dependabot/npm_and_yarn/types/node-16.11.47 
Bump @types/node from 16.11.46 to 16.11.47
 2022-08-01 17:33:11 +02:00
dependabot[bot] 8c65c50f8e Bump @types/node from 16.11.46 to 16.11.47 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.46 to 16.11.47.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:27 +00:00
dependabot[bot] 15dae1771a Bump eslint-plugin-jest from 26.6.0 to 26.7.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.6.0 to 26.7.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.6.0...v26.7.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:18 +00:00
Will Da Silva 15d18576a5 Merge branch 'upstream/main' into main 2022-07-30 00:44:27 -04:00
Federico Builes 0517f5ae3d Merge pull request #172 from actions/dependabot/npm_and_yarn/types/node-16.11.46 
Bump @types/node from 16.11.45 to 16.11.46
 2022-07-29 14:32:13 +02:00
Federico Builes a7ed04cb6d Merge pull request #173 from actions/dependabot/npm_and_yarn/got-12.3.0 
Bump got from 12.2.0 to 12.3.0
 2022-07-29 14:23:49 +02:00
dependabot[bot] 5956ba4d37 Bump got from 12.2.0 to 12.3.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.2.0 to 12.3.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.2.0...v12.3.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-29 01:27:53 +00:00
dependabot[bot] ee739211c3 Bump @types/node from 16.11.45 to 16.11.46 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.45 to 16.11.46.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-29 01:27:43 +00:00
Federico Builes 2427b83fb6 Merge pull request #171 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.31.0 
Bump @typescript-eslint/parser from 5.30.7 to 5.31.0
 2022-07-26 12:45:30 +02:00
dependabot[bot] e004499203 Bump @typescript-eslint/parser from 5.30.7 to 5.31.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.30.7 to 5.31.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.31.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 09:30:36 +00:00
Federico Builes 15e8301141 Merge pull request #170 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.31.0 
Bump @typescript-eslint/eslint-plugin from 5.30.7 to 5.31.0
 2022-07-26 11:29:43 +02:00
dependabot[bot] 074e15f1d2 Bump @typescript-eslint/eslint-plugin from 5.30.7 to 5.31.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.30.7 to 5.31.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.31.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 01:49:44 +00:00
Federico Builes 28bd35e115 Merge pull request #167 from actions/dependabot/npm_and_yarn/zod-3.17.10 
Bump zod from 3.17.9 to 3.17.10
 2022-07-26 03:00:59 +02:00
Federico Builes 1a8b866371 adding dist 2022-07-26 02:59:21 +02:00
dependabot[bot] 7414ae2b68 Bump zod from 3.17.9 to 3.17.10 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.9 to 3.17.10.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.9...v3.17.10)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 00:54:13 +00:00
Federico Builes 25a2578e41 Merge pull request #169 from actions/dependabot/npm_and_yarn/got-12.2.0 
Bump got from 12.1.0 to 12.2.0
 2022-07-26 02:53:24 +02:00
Federico Builes 5a348f087a Merge pull request #168 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.3.7 
Bump eslint-plugin-github from 4.3.6 to 4.3.7
 2022-07-26 02:53:05 +02:00
dependabot[bot] 4d7937d9b8 Bump got from 12.1.0 to 12.2.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.1.0 to 12.2.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.1.0...v12.2.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-25 01:54:31 +00:00
dependabot[bot] 4b57fa2745 Bump eslint-plugin-github from 4.3.6 to 4.3.7 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.3.6 to 4.3.7.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.3.6...v4.3.7)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-25 01:53:49 +00:00
Will Da Silva 388b1a309d Support user-provided base/head refs & non-PR workflows 2022-07-21 15:47:05 -04:00
Federico Builes b15d68a617 Merge pull request #163 from actions/dependabot/npm_and_yarn/zod-3.17.9 
Bump zod from 3.17.4 to 3.17.9
 2022-07-19 13:29:36 +02:00
Federico Builes 86ba360860 updating dist 2022-07-19 05:28:23 -06:00
dependabot[bot] 1c643b69e3 Bump zod from 3.17.4 to 3.17.9 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.4 to 3.17.9.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.4...v3.17.9)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-19 11:26:12 +00:00
Federico Builes cc90e94fd7 Merge pull request #162 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.7 
Bump @typescript-eslint/parser from 5.30.6 to 5.30.7
 2022-07-19 13:13:51 +02:00
dependabot[bot] ca03cb626b Bump @typescript-eslint/parser from 5.30.6 to 5.30.7 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.30.6 to 5.30.7.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.30.7/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-19 11:12:11 +00:00
Federico Builes 0c672b9f6f Merge pull request #161 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.7 
Bump @typescript-eslint/eslint-plugin from 5.30.6 to 5.30.7
 2022-07-19 13:11:11 +02:00