cnagadya
d1e9a12830
Resolve conflicts
2022-10-13 11:06:40 +00:00
Federico Builes and Christine Nagadya
2dd6c6a3d7
Fixing a bug with GHSA filtering.
...
Co-authored-by: Christine Nagadya <cnagadya@github.com >
2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf
Document the behavior of the GHSA filtering function.
2022-10-11 15:09:58 +02:00
Federico Builes
ee42a6512f
Show the dependency name instead of the manifest.
2022-10-11 14:50:55 +02:00
Federico Builes
468485fc8e
Clean up the main script a bit.
2022-09-27 12:25:12 +02:00
Federico Builes
0515f5cb39
Adding a skeleton for scanned dependencies in the summary.
2022-09-26 19:14:04 +02:00
Federico Builes
2d1d679f58
Move manifest grouping outside main.ts
2022-09-26 19:13:25 +02:00
Federico Builes
a3563a05bc
Use a set instead of raw JS objects.
2022-09-26 12:41:16 +02:00
Federico Builes
8a20ddbf25
try adding 3 sections
2022-09-26 12:21:24 +02:00
Federico Builes
60be833ffd
Update manifest formatting in output.
2022-09-26 12:01:39 +02:00
Federico Builes
000837f2ac
Don't nest groups.
2022-09-26 11:41:02 +02:00
Federico Builes
89f99d150a
adding colors to the dep output
2022-09-26 11:35:05 +02:00
Federico Builes
78c7c01396
Merge branch 'main' into add-scanned-deps
...
# Conflicts:
# dist/index.js.map
2022-09-26 08:47:23 +02:00
Sarah Aladetan
4f00b72b84
filter allowed ghsas in action flow
2022-09-22 22:25:21 +00:00
Federico Builes
723ec8c0d3
Try showing information about the scanned dependencies.
2022-09-22 16:49:45 +02:00
Sarah Aladetan
0d23c39a5d
filter by scope in action
2022-09-15 20:03:27 +00:00
Federico Builes
5da7945e2b
Fixing lint/dist.
2022-08-18 16:15:03 +02:00
Federico Builes and GitHub
0e0d6ec5d6
Merge branch 'main' into add-summary
2022-08-18 16:11:15 +02:00
Tiago Pascoal
aef949f026
Show vulnerabities and license information on the job summary.
...
Users can see the results that were found directly on the job summary
All the results are grouped by manifest.
It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.
Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
2022-08-04 15:35:07 +00:00
Will Da Silva
388b1a309d
Support user-provided base/head refs & non-PR workflows
2022-07-21 15:47:05 -04:00
Kenichi Kamiya
9fdc2574b8
Fix rest eslint errors manually
2022-07-04 20:12:07 +09:00
Kenichi Kamiya
6e9189a5c1
npx eslint --fix src/**/*.ts
2022-07-04 20:12:07 +09:00
Federico Builes
1c59cdf2a9
Fix the unknown licenses error message
2022-06-16 06:03:16 +02:00
Federico Builes
963fe8045d
Always print null licenses.
2022-06-15 15:22:35 +02:00
Federico Builes
42e2bc1ed2
Handle unknown licenses.
2022-06-14 13:54:27 +02:00
Federico Builes
7278093fa0
Clarify some of the error messages.
2022-06-14 07:41:37 +02:00
Federico Builes
1791775ce6
temp commit
2022-06-14 05:57:43 +02:00
Federico Builes
571f236610
Improved wording on license messages.
2022-06-13 20:08:16 +02:00
Federico Builes
4ac3d318ab
Refactoring on PR feedback.
2022-06-08 17:45:42 +02:00
Federico Builes
2ae9a2d51b
Add logic for denied licenses.
2022-06-06 20:32:46 +02:00
Federico Builes
dc7b0a2788
Show an error when disallowed dependencies show up.
2022-06-06 20:32:46 +02:00
Federico Builes
06297bf229
Fixing failing tests
2022-06-06 20:32:46 +02:00
Federico Builes
bccacf9708
Skeleton for license validation.
2022-06-06 20:32:46 +02:00
Federico Builes
2f38c7e78c
Add severity level to the vulns not found message.
2022-06-01 15:56:16 +02:00
Federico Builes
f9a13e70f4
Fixing circular reference, adding prettier.
2022-06-01 12:09:11 +02:00
Federico Builes
7db11574b7
Make vulnerabilities be [] by default.
2022-06-01 05:36:46 +02:00
Federico Builes
731e67eca2
Add filtering by low severity as the default.
2022-05-31 17:08:22 +02:00
Federico Builes
f0a04841ce
Adding logic to filter by vulnerability severity.
2022-05-31 16:50:39 +02:00
Federico Builes
92e40d7290
Move printing function out.
2022-05-31 06:03:42 +02:00
Federico Builes
0b73ead548
Merge branch 'main' into adding-config-file
2022-05-30 06:37:29 +02:00
Eli Reisman
a4da1f9048
handle unexpected error types opaquely
2022-05-23 11:45:36 -07:00
Eli Reisman
19edfd7243
fix default case in error handling
2022-05-23 11:36:34 -07:00
Federico Builes
0e9a322413
Move config into its own file.
2022-05-12 18:05:14 +02:00
Federico Builes
52795b8e93
Print config files.
2022-05-12 11:43:08 +02:00
Eli Reisman and GitHub
cabd238caa
enable differentiated error messages for DR eligibility when API returns 403
2022-05-11 19:53:29 +00:00
Federico Builes
3f943b86c9
initial commit
2022-03-31 18:31:39 +02:00
cnagadya