actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 9885d0c74c Remove default values in action.yml Federico Builes 2023-04-06 21:33:35 +02:00
  • cebb5b1214 Don't use underscore for inline configs. Federico Builes 2023-04-06 21:33:24 +02:00
  • 50b918791f Update README. Federico Builes 2023-04-06 17:59:34 +02:00
  • 3f6a17c81c Update examples to use underscores instead of dashes. Federico Builes 2023-04-06 17:58:58 +02:00
  • 2c065db296 Add a test-helpers file. Federico Builes 2023-04-06 17:32:42 +02:00
  • ff46a4b16e Fixing failing test. Federico Builes 2023-04-06 17:11:29 +02:00
  • 153f274eb4 Mock octokit. Federico Builes 2023-04-06 17:11:16 +02:00
  • 0041d7fa41 Add a failing test. Federico Builes 2023-04-06 16:21:52 +02:00
  • 1896d6f936 Clean up; updated docs Stefan Petrushevski 2023-04-06 10:49:30 +02:00
  • 39dca1ce09 Adjusted output Stefan Petrushevski 2023-04-06 10:04:48 +02:00
  • d3fdbc93c5 Build and updated README Stefan Petrushevski 2023-04-06 09:58:14 +02:00
  • 9ad7edb033 switched to purl format Stefan Petrushevski 2023-04-06 09:37:42 +02:00
  • 97c9465751 separate tests for external configs Federico Builes 2023-04-05 15:14:57 +02:00
  • 78f160dece Update README.md Courtney Claessens 2023-04-03 15:57:39 -04:00
  • 8b0d4b3327 Merge pull request #446 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.57.0 Federico Builes 2023-04-03 11:05:13 +02:00
  • 8c24360582 Merge pull request #448 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.7.0 Federico Builes 2023-04-03 11:04:36 +02:00
  • 80be5a7079 Bump @typescript-eslint/eslint-plugin from 5.56.0 to 5.57.0 dependabot[bot] 2023-04-03 05:10:30 +00:00
  • 35bd59fb9e Bump eslint-plugin-github from 4.6.1 to 4.7.0 dependabot[bot] 2023-04-03 05:09:05 +00:00
  • b7ce9d546d Merge pull request #447 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.57.0 Federico Builes 2023-04-03 07:02:10 +02:00
  • 5875c70f8f Merge pull request #449 from actions/dependabot/npm_and_yarn/types/node-16.18.23 Federico Builes 2023-04-03 07:01:49 +02:00
  • 43274f6899 Merge pull request #450 from actions/dependabot/npm_and_yarn/eslint-8.37.0 Federico Builes 2023-04-03 07:01:31 +02:00
  • 81d482fe7f Bump eslint from 8.36.0 to 8.37.0 dependabot[bot] 2023-04-03 02:02:13 +00:00
  • 420f61c64a Bump @types/node from 16.18.21 to 16.18.23 dependabot[bot] 2023-04-03 02:01:46 +00:00
  • 866b422c9e Bump @typescript-eslint/parser from 5.56.0 to 5.57.0 dependabot[bot] 2023-04-03 02:00:49 +00:00
  • 76b8e83d1a Use 'Unnamed Manifest' as catchall bucket Justin Holguín 2023-03-28 16:06:07 +00:00
  • 91eae64e0c Merge pull request #442 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.56.0 Federico Builes 2023-03-27 07:57:20 +02:00
  • f5f2eae995 Merge pull request #441 from actions/dependabot/npm_and_yarn/nodemon-2.0.22 Federico Builes 2023-03-27 07:37:18 +02:00
  • 355bcf860e Bump @typescript-eslint/eslint-plugin from 5.55.0 to 5.56.0 dependabot[bot] 2023-03-27 05:32:56 +00:00
  • 5726b20f6c Bump nodemon from 2.0.21 to 2.0.22 dependabot[bot] 2023-03-27 05:32:36 +00:00
  • 4d05b525ee Merge pull request #444 from actions/dependabot/npm_and_yarn/prettier-2.8.7 Federico Builes 2023-03-27 07:32:04 +02:00
  • 81ee3a8dc8 Merge pull request #443 from actions/dependabot/npm_and_yarn/types/node-16.18.21 Federico Builes 2023-03-27 07:31:53 +02:00
  • 3b871daeea Merge pull request #440 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.56.0 Federico Builes 2023-03-27 07:31:31 +02:00
  • 3f5b40d019 Bump prettier from 2.8.4 to 2.8.7 dependabot[bot] 2023-03-27 02:06:07 +00:00
  • 89b3ba9416 Bump @types/node from 16.18.16 to 16.18.21 dependabot[bot] 2023-03-27 02:05:34 +00:00
  • a44d7c538d Bump @typescript-eslint/parser from 5.55.0 to 5.56.0 dependabot[bot] 2023-03-27 02:01:38 +00:00
  • 7e1f7be1f6 Handle dependencies with an empty manifest field Justin Holguín 2023-03-24 19:07:22 +00:00
  • 0c01e947d6 Flesh out the warnings section a tiny bit Justin Holguín 2023-03-23 23:25:28 +00:00
  • 782549c724 Ignore snapshot_warnings for missing head snapshots Justin Holguín 2023-03-23 22:59:07 +00:00
  • 419396de41 Show snapshot warnings in the summary Justin Holguín 2023-03-22 21:13:20 +00:00
  • 51d5d2913d fix header juxtin/include-dependency-snapshots Justin Holguín 2023-03-22 16:26:03 +00:00
  • 10529907c7 Add support for snapshot dependency changes Justin Holguín 2023-03-21 22:11:34 +00:00
  • cc302f4c2b fix linter/format tgrall 2023-03-20 09:07:07 +01:00
  • f46c48ed6d bumping version v3.0.4 Federico Builes 2023-03-20 07:22:20 +01:00
  • 1ac6f5d754 Merge pull request #437 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.55.0 Federico Builes 2023-03-20 06:47:27 +01:00
  • 30049aaf02 Bump @typescript-eslint/eslint-plugin from 5.54.1 to 5.55.0 dependabot[bot] 2023-03-20 05:45:47 +00:00
  • 02b3fbad1c Merge pull request #436 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.55.0 Federico Builes 2023-03-20 06:44:51 +01:00
  • 5c5feeb63d Merge pull request #435 from actions/dependabot/npm_and_yarn/types/node-16.18.16 Federico Builes 2023-03-20 06:44:19 +01:00
  • 85bb8372bf Bump @typescript-eslint/parser from 5.54.1 to 5.55.0 dependabot[bot] 2023-03-20 02:15:06 +00:00
  • 463aece43a Bump @types/node from 16.18.14 to 16.18.16 dependabot[bot] 2023-03-20 02:14:20 +00:00
  • 621d03bf3a Add none as option for fail-on-severity tgrall 2023-03-17 21:11:39 +01:00
  • e17845d155 README changes as per PR comments Stefan Petrushevski 2023-03-16 11:23:57 +01:00
  • e3fb5152be Merge pull request #426 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.54.1 Federico Builes 2023-03-13 09:29:06 +01:00
  • 4b088f072a Merge pull request #427 from actions/dependabot/npm_and_yarn/zod-3.21.4 Federico Builes 2023-03-13 09:28:51 +01:00
  • e46d65f438 Bump @typescript-eslint/eslint-plugin from 5.54.0 to 5.54.1 dependabot[bot] 2023-03-13 07:08:40 +00:00
  • 75222ed640 adding dist Federico Builes 2023-03-13 08:02:02 +01:00
  • f46bc4dbf8 Merge pull request #428 from actions/dependabot/npm_and_yarn/eslint-8.36.0 Federico Builes 2023-03-13 08:00:22 +01:00
  • e0a5088fd6 Merge pull request #429 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.54.1 Federico Builes 2023-03-13 08:00:01 +01:00
  • f1f8f2bf88 Bump @typescript-eslint/parser from 5.53.0 to 5.54.1 dependabot[bot] 2023-03-13 02:06:48 +00:00
  • 453f5e3690 Bump eslint from 8.35.0 to 8.36.0 dependabot[bot] 2023-03-13 02:06:12 +00:00
  • 6a47644794 Bump zod from 3.21.0 to 3.21.4 dependabot[bot] 2023-03-13 02:05:51 +00:00
  • f0bda66bbf updated README Stefan Petrushevski 2023-03-08 15:44:01 +01:00
  • 1d7d9a2c93 new builds Stefan Petrushevski 2023-03-08 15:24:23 +01:00
  • d5c2f70a7f no inline config options due to limitations Stefan Petrushevski 2023-03-08 15:23:57 +01:00
  • f92376010c inline config options Stefan Petrushevski 2023-03-08 15:05:16 +01:00
  • c2303c3070 builds Stefan Petrushevski 2023-03-08 14:30:37 +01:00
  • 884b7abd2d updated summary output; create_summary.ts script Stefan Petrushevski 2023-03-08 13:02:59 +01:00
  • 600458c5dd licenses check exclusion list Stefan Petrushevski 2023-03-08 12:38:34 +01:00
  • d11e757f70 No support for custom branches note in README. Federico Builes 2023-03-06 09:13:40 +01:00
  • 63e5e62dba Merge pull request #416 from davelosert/adjust_summary_format Federico Builes 2023-03-06 09:10:58 +01:00
  • 5951e7db04 Merge branch 'main' into adjust_summary_format adjust_summary_format Federico Builes 2023-03-06 09:08:35 +01:00
  • 4f537bf170 Merge pull request #417 from actions/dependabot/npm_and_yarn/zod-3.21.0 Federico Builes 2023-03-06 08:25:25 +01:00
  • 25f22ad0c7 dist files Federico Builes 2023-03-06 08:25:10 +01:00
  • 2878425083 Merge pull request #419 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.54.0 Federico Builes 2023-03-06 05:56:03 +01:00
  • 862b667fee Merge pull request #421 from actions/dependabot/npm_and_yarn/nodemon-2.0.21 Federico Builes 2023-03-06 05:55:16 +01:00
  • f7c42c00ca Bump @typescript-eslint/eslint-plugin from 5.53.0 to 5.54.0 dependabot[bot] 2023-03-06 04:48:15 +00:00
  • 00dbe9df8d Bump nodemon from 2.0.20 to 2.0.21 dependabot[bot] 2023-03-06 04:47:54 +00:00
  • f89a053f16 Merge pull request #420 from actions/dependabot/npm_and_yarn/types/node-16.18.14 Federico Builes 2023-03-06 05:47:25 +01:00
  • 700f66ed8f Merge pull request #418 from actions/dependabot/npm_and_yarn/got-12.6.0 Federico Builes 2023-03-06 05:47:11 +01:00
  • fc5eaef91a Bump @types/node from 16.18.13 to 16.18.14 dependabot[bot] 2023-03-06 02:15:36 +00:00
  • 087d445ca8 Bump got from 12.5.3 to 12.6.0 dependabot[bot] 2023-03-06 02:14:13 +00:00
  • 95fa321e74 Bump zod from 3.20.6 to 3.21.0 dependabot[bot] 2023-03-06 02:13:53 +00:00
  • 429d317ccc Rebuilt dist files David Losert 2023-03-02 07:52:41 +00:00
  • 6b34d93738 Skips dependency review if no changes detected David Losert 2023-03-02 07:47:09 +00:00
  • b7a25f4e9b Makes License Issues a single table per manifest David Losert 2023-03-02 07:43:23 +00:00
  • 9f0792541a Rebuilt dist files David Losert 2023-03-02 06:57:41 +00:00
  • 5e6910e937 Built the library in it's current state David Losert 2023-03-01 07:43:17 +00:00
  • 715956774a Adds some explanation on how to use the script David Losert 2023-03-01 07:43:08 +00:00
  • 94e6fb6deb Fixes build to only include src folder David Losert 2023-03-01 07:43:00 +00:00
  • 1090cda9d5 Adjusts headlines and formatting for license issues David Losert 2023-02-28 12:28:20 +00:00
  • 6315b3822f Renames variable to be more speaking David Losert 2023-02-28 12:27:55 +00:00
  • c5dab80dd4 Adds script to generate test-markdown files David Losert 2023-02-28 11:08:48 +00:00
  • b089c5b002 Adds conditional license summary David Losert 2023-02-28 11:08:39 +00:00
  • 6e66d136ec Reformats vulnerability section David Losert 2023-02-27 16:05:59 +00:00
  • 1b9faef957 Fixes ESLint to also incldue tests and fixes eslint errors in tests David Losert 2023-02-27 16:05:03 +00:00
  • 748b8a5c33 Merge pull request #414 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.53.0 Federico Builes 2023-02-27 08:13:40 +01:00
  • 1639aef23d Bump @typescript-eslint/parser from 5.52.0 to 5.53.0 dependabot[bot] 2023-02-27 07:11:29 +00:00
  • f5f33b0c33 Merge pull request #415 from actions/dependabot/npm_and_yarn/types/node-16.18.13 Federico Builes 2023-02-27 08:08:52 +01:00
  • 2d8dd98fa8 Merge pull request #413 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.53.0 Federico Builes 2023-02-27 08:08:23 +01:00
  • 182833caa3 Merge pull request #412 from actions/dependabot/npm_and_yarn/eslint-8.35.0 Federico Builes 2023-02-27 08:08:09 +01:00
  • b0bc193e06 Bump @types/node from 16.18.12 to 16.18.13 dependabot[bot] 2023-02-27 02:53:14 +00:00