actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 917e5af203 Merge pull request #291 from actions/dependabot/npm_and_yarn/types/node-16.11.66 Federico Builes 2022-10-17 07:28:53 +02:00
  • ba6dba6225 Merge pull request #292 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.2 Federico Builes 2022-10-17 07:26:25 +02:00
  • 63154658bc Bump eslint-plugin-jest from 27.1.1 to 27.1.2 dependabot[bot] 2022-10-17 01:51:39 +00:00
  • f84c5813e5 Bump @types/node from 16.11.65 to 16.11.66 dependabot[bot] 2022-10-17 01:51:15 +00:00
  • 228a6404a2 Remove untracked dev-config.yml cnagadya 2022-10-14 13:07:46 +00:00
  • c84947f64b Ignore dev-config file cnagadya 2022-10-14 12:31:49 +00:00
  • 71dbf10e60 Add configuration instruction to docs cnagadya 2022-10-14 12:31:17 +00:00
  • f9deefc2e9 Retrieve config file values for local testing cnagadya 2022-10-14 09:26:12 +00:00
  • 0e5d083be1 Merge pull request #289 from actions/dependabot/npm_and_yarn/octokit-2.0.9 Federico Builes 2022-10-14 09:09:30 +02:00
  • 2f428eec67 adding dist Federico Builes 2022-10-14 09:03:58 +02:00
  • dff2fdff0f Bump octokit from 2.0.7 to 2.0.9 dependabot[bot] 2022-10-14 06:56:20 +00:00
  • 12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 Federico Builes 2022-10-14 08:55:30 +02:00
  • 3156cf8998 Bump @octokit/request-error from 3.0.1 to 3.0.2 dependabot[bot] 2022-10-14 01:25:21 +00:00
  • fd675ced9c v2.5.0 release Co-authored-by: Henri Maurer <hmaurer@github.com> Co-authored-by: Federico Builes <febuiles@github.com> v2.5.0 cnagadya 2022-10-13 14:58:37 +00:00
  • f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback Federico Builes 2022-10-13 16:54:33 +02:00
  • 7e41a6f1ee Removing unnecessary beforeAll block Federico Builes 2022-10-13 16:52:54 +02:00
  • 4c0961eff6 Add tests for GitHub License API fallback cnagadya 2022-10-13 11:57:38 +00:00
  • d1e9a12830 Resolve conflicts cnagadya 2022-10-13 11:06:40 +00:00
  • 2e3713aab8 Optimise setGHLicenses cnagadya 2022-10-11 10:44:55 +00:00
  • ba9d7c1389 Retrieve null licenses from licenses API cnagadya 2022-10-11 10:40:12 +00:00
  • 0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 Federico Builes 2022-10-13 12:28:39 +02:00
  • 129f0ad973 adding dist Federico Builes 2022-10-13 12:26:58 +02:00
  • 0a88a4704b Bump ansi-styles from 6.2.0 to 6.2.1 dependabot[bot] 2022-10-13 06:12:45 +00:00
  • 18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 Federico Builes 2022-10-13 08:12:07 +02:00
  • 61cee4b12b Bump got from 12.5.1 to 12.5.2 dependabot[bot] 2022-10-13 01:25:32 +00:00
  • 94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 Federico Builes 2022-10-12 08:05:50 +02:00
  • 577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 Federico Builes 2022-10-12 08:02:05 +02:00
  • 9ce6cb532b adding dist Federico Builes 2022-10-12 08:01:53 +02:00
  • 0b980b1ccd Bump ansi-styles from 6.1.1 to 6.2.0 dependabot[bot] 2022-10-12 01:41:51 +00:00
  • bc5f6c2f39 Bump eslint-plugin-github from 4.3.7 to 4.4.0 dependabot[bot] 2022-10-12 01:41:43 +00:00
  • 9c96258789 Update to 2.4.1 v2.4.1 cnagadya 2022-10-11 13:42:40 +00:00
  • f076f221f4 Merge pull request #280 from actions/format-bugs Federico Builes 2022-10-11 15:22:44 +02:00
  • 88b817ec8d adding dist Federico Builes 2022-10-11 15:20:02 +02:00
  • 2dd6c6a3d7 Fixing a bug with GHSA filtering. Federico Builes 2022-10-11 15:17:34 +02:00
  • 1d9bfbbddf Document the behavior of the GHSA filtering function. Federico Builes 2022-10-11 15:09:58 +02:00
  • f632f5f79d adding dist Federico Builes 2022-10-11 14:51:27 +02:00
  • ee42a6512f Show the dependency name instead of the manifest. Federico Builes 2022-10-11 14:50:55 +02:00
  • 6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 Federico Builes 2022-10-11 12:11:26 +02:00
  • b81bfe53ce Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0 dependabot[bot] 2022-10-11 10:10:06 +00:00
  • 5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 Federico Builes 2022-10-11 12:09:15 +02:00
  • 2018b3e66f Bump @typescript-eslint/parser from 5.39.0 to 5.40.0 dependabot[bot] 2022-10-11 08:50:56 +00:00
  • 463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 Federico Builes 2022-10-11 10:50:05 +02:00
  • c9b9d23e75 Bump @types/node from 16.11.64 to 16.11.65 dependabot[bot] 2022-10-11 01:32:53 +00:00
  • 4c14cfe593 Merge pull request #275 from actions/dependabot/npm_and_yarn/eslint-8.25.0 Federico Builes 2022-10-10 08:24:07 +02:00
  • 5b70fe08e7 Bump eslint from 8.24.0 to 8.25.0 dependabot[bot] 2022-10-10 01:52:29 +00:00
  • 81216f689b Merge pull request #274 from actions/dependabot/npm_and_yarn/yaml-2.1.3 Federico Builes 2022-10-06 14:43:54 +02:00
  • afbc15c97f updating dist files Federico Builes 2022-10-06 14:41:07 +02:00
  • 8d974c4ee8 Bump yaml from 2.1.2 to 2.1.3 dependabot[bot] 2022-10-06 11:19:30 +00:00
  • cdad98596a Merge pull request #273 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.1 Federico Builes 2022-10-06 13:18:40 +02:00
  • 0a0eb39992 Bump eslint-plugin-jest from 27.1.0 to 27.1.1 dependabot[bot] 2022-10-06 01:41:12 +00:00
  • df3ceaf7f0 Merge pull request #269 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.39.0 Federico Builes 2022-10-05 13:17:37 +02:00
  • 1997789b86 Bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0 dependabot[bot] 2022-10-05 11:01:03 +00:00
  • 584e620d09 Merge pull request #270 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.39.0 Federico Builes 2022-10-05 13:00:23 +02:00
  • 1fa34689ad Merge pull request #271 from actions/dependabot/npm_and_yarn/types/node-16.11.64 Federico Builes 2022-10-05 13:00:15 +02:00
  • de2814d20e Merge pull request #272 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.0 Federico Builes 2022-10-05 08:17:58 +02:00
  • eabc27054f Bump eslint-plugin-jest from 27.0.4 to 27.1.0 dependabot[bot] 2022-10-05 01:54:54 +00:00
  • b486e073e9 Bump @types/node from 16.11.63 to 16.11.64 dependabot[bot] 2022-10-05 01:54:43 +00:00
  • 03321307df Bump @typescript-eslint/parser from 5.38.1 to 5.39.0 dependabot[bot] 2022-10-05 01:51:49 +00:00
  • 1ade604b58 adding spdx-satisfies parse-spdx Federico Builes 2022-10-04 15:46:53 +02:00
  • cc2a6ab32f Merge pull request #268 from actions/dependabot/npm_and_yarn/yaml-2.1.2 Federico Builes 2022-10-03 11:32:30 +02:00
  • 5de8be4c40 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.1.2 Federico Builes 2022-10-03 11:31:02 +02:00
  • 1b8bd021a3 adding dist Federico Builes 2022-10-03 11:29:46 +02:00
  • 65d8cd176f Merge pull request #267 from actions/dependabot/npm_and_yarn/types/node-16.11.63 Federico Builes 2022-10-03 11:29:23 +02:00
  • 6d500ff869 Merge pull request #266 from actions/dependabot/npm_and_yarn/actions/github-5.1.1 Federico Builes 2022-10-03 11:29:14 +02:00
  • 0259ed8420 add dist Federico Builes 2022-10-03 11:28:16 +02:00
  • ec636f3d19 Bump yaml from 2.1.1 to 2.1.2 dependabot[bot] 2022-10-03 02:06:25 +00:00
  • 367e85631b Bump @types/node from 16.11.62 to 16.11.63 dependabot[bot] 2022-10-03 02:05:36 +00:00
  • abf7b5a775 Bump @actions/github from 5.1.0 to 5.1.1 dependabot[bot] 2022-10-03 02:05:00 +00:00
  • ba85772f4b Merge pull request #265 from actions/dependabot/npm_and_yarn/actions/core-1.10.0 Federico Builes 2022-09-30 09:09:00 +02:00
  • 8d812df813 adding dist Federico Builes 2022-09-30 09:07:38 +02:00
  • 63e12b21ed Bump @actions/core from 1.9.1 to 1.10.0 dependabot[bot] 2022-09-30 01:45:02 +00:00
  • 0385b5b162 Merge pull request #248 from actions/add-scanned-deps Federico Builes 2022-09-28 10:53:37 +02:00
  • 8e053e0f5e Merge pull request #262 from actions/dependabot/npm_and_yarn/typescript-4.8.4 Federico Builes 2022-09-28 08:04:35 +02:00
  • e0ff0cf732 Merge pull request #261 from actions/dependabot/npm_and_yarn/got-12.5.1 Federico Builes 2022-09-28 08:04:26 +02:00
  • ea65cbfc18 Bump typescript from 4.8.3 to 4.8.4 dependabot[bot] 2022-09-28 01:29:19 +00:00
  • 5bf43a89cd Bump got from 12.5.0 to 12.5.1 dependabot[bot] 2022-09-28 01:29:03 +00:00
  • 468485fc8e Clean up the main script a bit. add-scanned-deps Federico Builes 2022-09-27 12:25:12 +02:00
  • 46c9f79a1f Create utils.ts file for helper functions. Federico Builes 2022-09-27 12:23:05 +02:00
  • cd3f55e8f9 Add all the dependencies to the review summary too. Federico Builes 2022-09-27 11:52:15 +02:00
  • f832351766 Merge pull request #258 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.38.1 Federico Builes 2022-09-27 08:10:02 +02:00
  • f96ed229f4 Bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.38.1 dependabot[bot] 2022-09-27 06:08:27 +00:00
  • 629703a27b Merge pull request #260 from actions/dependabot/npm_and_yarn/types/node-16.11.62 Federico Builes 2022-09-27 08:08:06 +02:00
  • d05bfb69a5 Merge pull request #259 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.38.1 Federico Builes 2022-09-27 08:07:40 +02:00
  • 02bcebdd6e Bump @types/node from 16.11.60 to 16.11.62 dependabot[bot] 2022-09-27 01:30:25 +00:00
  • fbeabf7e29 Bump @typescript-eslint/parser from 5.38.0 to 5.38.1 dependabot[bot] 2022-09-27 01:30:16 +00:00
  • 0515f5cb39 Adding a skeleton for scanned dependencies in the summary. Federico Builes 2022-09-26 19:14:04 +02:00
  • 2d1d679f58 Move manifest grouping outside main.ts Federico Builes 2022-09-26 19:13:25 +02:00
  • a3563a05bc Use a set instead of raw JS objects. Federico Builes 2022-09-26 12:41:16 +02:00
  • 8a20ddbf25 try adding 3 sections Federico Builes 2022-09-26 12:21:24 +02:00
  • 2a646668d9 adding dist Federico Builes 2022-09-26 12:03:34 +02:00
  • 60be833ffd Update manifest formatting in output. Federico Builes 2022-09-26 12:01:39 +02:00
  • edc501a219 adding dist Federico Builes 2022-09-26 11:41:40 +02:00
  • 000837f2ac Don't nest groups. Federico Builes 2022-09-26 11:41:02 +02:00
  • 89f99d150a adding colors to the dep output Federico Builes 2022-09-26 11:35:05 +02:00
  • 0ed41eff02 Merge branch 'main' into add-scanned-deps Federico Builes 2022-09-26 11:34:43 +02:00
  • dbe70eb550 updating gitignore Federico Builes 2022-09-26 11:29:22 +02:00
  • 78c7c01396 Merge branch 'main' into add-scanned-deps Federico Builes 2022-09-26 08:47:23 +02:00
  • 89a5c76329 Merge pull request #254 from actions/dependabot/npm_and_yarn/actions/github-5.1.0 Federico Builes 2022-09-26 08:46:18 +02:00
  • 4a6d691283 adding dist Federico Builes 2022-09-26 08:45:09 +02:00
  • b58d457243 Merge pull request #253 from actions/dependabot/npm_and_yarn/types/node-16.11.60 Federico Builes 2022-09-26 08:42:47 +02:00