actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • cc033856be Merge pull request #255 from actions/dependabot/npm_and_yarn/eslint-8.24.0 Federico Builes 2022-09-26 08:04:38 +02:00
  • 8595e805a5 Bump eslint from 8.23.1 to 8.24.0 dependabot[bot] 2022-09-26 01:55:41 +00:00
  • fa10a7f0d6 Bump @actions/github from 5.0.3 to 5.1.0 dependabot[bot] 2022-09-26 01:54:35 +00:00
  • 6755d8aa71 Bump @types/node from 16.11.59 to 16.11.60 dependabot[bot] 2022-09-26 01:54:19 +00:00
  • 375c537008 Updating to 2.4.0 v2.4.0 Sarah Aladetan 2022-09-23 13:07:20 -07:00
  • 98f28ebe06 Merge pull request #251 from actions/sarahkemi/ghsa-allowlist Sarah Aladetan 2022-09-23 13:06:41 -07:00
  • 716b322ec9 add allow-ghsas input to action.yml sarahkemi/ghsa-allowlist Sarah Aladetan 2022-09-23 19:59:39 +00:00
  • 12ae1bd550 Update wording in README.md Sarah Aladetan 2022-09-23 12:32:46 -07:00
  • bcb52636bd build and package allow-ghsas Sarah Aladetan 2022-09-22 22:45:27 +00:00
  • 241ff73141 add doc on allow-ghsas to readme Sarah Aladetan 2022-09-22 22:44:17 +00:00
  • 062b749663 revise ghsa filter Sarah Aladetan 2022-09-22 22:36:34 +00:00
  • 4f00b72b84 filter allowed ghsas in action flow Sarah Aladetan 2022-09-22 22:25:21 +00:00
  • 602f968ea2 create a filter for vulns that are on the allowlist Sarah Aladetan 2022-09-22 21:36:26 +00:00
  • bd61ea0d9e create config option for ghsa allowlist Sarah Aladetan 2022-09-22 21:34:18 +00:00
  • 8ec13c1f01 adding dist Federico Builes 2022-09-22 16:52:03 +02:00
  • 723ec8c0d3 Try showing information about the scanned dependencies. Federico Builes 2022-09-22 16:49:45 +02:00
  • 2843194510 Updating version. v2.3.0 Federico Builes 2022-09-22 14:27:24 +02:00
  • 6944531f76 Update README.md Federico Builes 2022-09-22 14:26:27 +02:00
  • 29cdbbed37 Merge pull request #228 from actions/external-config Federico Builes 2022-09-22 14:22:39 +02:00
  • 88502badc9 Update README.md external-config Federico Builes 2022-09-22 08:03:23 +02:00
  • ff7c97a976 adding dist Federico Builes 2022-09-21 17:03:01 +02:00
  • 4d3b8e5269 Clarify code a bit. Federico Builes 2022-09-21 17:01:00 +02:00
  • 38ee6e8360 Improve scopes example in new docs. Federico Builes 2022-09-21 16:53:20 +02:00
  • 54cd9a7cba Merge branch 'main' into external-config Federico Builes 2022-09-21 16:50:02 +02:00
  • c4693c00ac Raise errors for invalid values in the external config. Federico Builes 2022-09-21 16:30:05 +02:00
  • e89f113be2 add callout to checkout main when updating major version tag Sarah Aladetan 2022-09-20 13:21:38 -07:00
  • 2b96ea7f03 Bump version to 2.2.0 v2.2.0 Sarah Aladetan 2022-09-20 13:06:20 -07:00
  • 4300ce8d38 Merge pull request #243 from actions/sarahkemi/filter-dev-deps Sarah Aladetan 2022-09-20 16:05:19 -04:00
  • de48c615a3 build and package scope filtering sarahkemi/filter-dev-deps Sarah Aladetan 2022-09-19 17:57:08 +00:00
  • eef7e39202 Accept options from both sources, prioritize external config. Federico Builes 2022-09-20 15:52:34 +02:00
  • 37dc32836b Merge branch 'main' into external-config Federico Builes 2022-09-20 15:29:28 +02:00
  • 890361387d Updating dist. Federico Builes 2022-09-20 15:16:25 +02:00
  • 61f19e6447 Let the users set the path for the config file. Federico Builes 2022-09-20 15:15:14 +02:00
  • fd959624bf Merge pull request #245 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.38.0 Federico Builes 2022-09-20 07:59:56 +02:00
  • 11dd186eb0 Merge pull request #246 from actions/dependabot/npm_and_yarn/got-12.5.0 Federico Builes 2022-09-20 07:59:44 +02:00
  • 1ab05cf855 Bump @typescript-eslint/eslint-plugin from 5.37.0 to 5.38.0 dependabot[bot] 2022-09-20 05:54:32 +00:00
  • 7d7d5e7c84 Bump got from 12.4.1 to 12.5.0 dependabot[bot] 2022-09-20 05:54:28 +00:00
  • 8a8fa8bd07 Merge pull request #244 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.38.0 Federico Builes 2022-09-20 07:53:39 +02:00
  • 06daf8e801 Bump @typescript-eslint/parser from 5.37.0 to 5.38.0 dependabot[bot] 2022-09-20 01:31:24 +00:00
  • aeb9ff5438 adding dist Federico Builes 2022-09-19 17:34:53 +02:00
  • 1ef21ab130 Leave a failing test for tomorrow! Federico Builes 2022-09-19 17:34:12 +02:00
  • 3c95902dd6 Adding more tests for the config file. Federico Builes 2022-09-19 17:29:25 +02:00
  • 4b4ec08f7b Make sure we get rid of the ridiculous dashes in the names. Federico Builes 2022-09-19 17:28:59 +02:00
  • a91c3ac205 Split reading inline/external configuration options. Federico Builes 2022-09-19 17:28:44 +02:00
  • bf0cb7fac4 Add a default config file. Federico Builes 2022-09-19 17:28:20 +02:00
  • 07a7056819 Update README to include config-file option. Federico Builes 2022-09-19 16:46:42 +02:00
  • b93fcee7ff Raise an error if the config file is not found. Federico Builes 2022-09-19 16:36:45 +02:00
  • 8bac022bfd Merge branch 'main' into external-config Federico Builes 2022-09-19 16:14:41 +02:00
  • fc4fb55b25 Merge pull request #241 from actions/dependabot/npm_and_yarn/nodemon-2.0.20 Federico Builes 2022-09-19 07:38:12 +02:00
  • 31c132fdca Bump nodemon from 2.0.19 to 2.0.20 dependabot[bot] 2022-09-19 01:55:04 +00:00
  • 10bc05df70 ensure scope filtering is backward compatible with enterprise rest api versions Sarah Aladetan 2022-09-16 19:13:58 +00:00
  • e641ee9a41 update readme with notes on dependency scopes Sarah Aladetan 2022-09-15 20:40:38 +00:00
  • 0ba71661e5 Adding failing tests. Federico Builes 2022-09-16 14:31:06 +02:00
  • 8ef181b2cb Read a hardcoded config file. Federico Builes 2022-09-16 14:30:57 +02:00
  • 7e2a489d03 Merge branch 'main' into external-config Federico Builes 2022-09-16 13:55:17 +02:00
  • eaeaeb3d57 Merge pull request #239 from actions/dependabot/npm_and_yarn/types/node-16.11.59 Federico Builes 2022-09-16 13:55:02 +02:00
  • 1eaf30e6eb Merge pull request #240 from actions/hm/fix-scan_pr Federico Builes 2022-09-16 13:50:52 +02:00
  • 5da3462152 Explain why we mangle dashed variables. Federico Builes 2022-09-16 13:47:16 +02:00
  • 6fa5a8f9c0 add fail-on-scopes input to action config Sarah Aladetan 2022-09-15 20:07:28 +00:00
  • 0d23c39a5d filter by scope in action Sarah Aladetan 2022-09-15 20:03:27 +00:00
  • 6549b27685 add configuration for scopes to fail on Sarah Aladetan 2022-09-15 18:48:58 +00:00
  • f4b16c52e5 add method to filter changes by given scopes Sarah Aladetan 2022-09-15 18:00:07 +00:00
  • 1a7a37c468 add scope to change schema Sarah Aladetan 2022-09-15 17:53:34 +00:00
  • 38b459efad Fix passing repo-token input in scan_pr script Henri Maurer 2022-09-15 10:09:46 +00:00
  • 6410b2cdd2 Bump @types/node from 16.11.58 to 16.11.59 dependabot[bot] 2022-09-14 02:00:08 +00:00
  • fd3a3b1051 Merge pull request #236 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.37.0 Federico Builes 2022-09-13 07:16:16 +02:00
  • 6771e49f11 Bump @typescript-eslint/parser from 5.36.2 to 5.37.0 dependabot[bot] 2022-09-13 05:14:03 +00:00
  • c7c07e1117 Merge pull request #237 from actions/dependabot/npm_and_yarn/eslint-8.23.1 Federico Builes 2022-09-13 07:13:17 +02:00
  • 59fdb0cce7 Merge pull request #238 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.37.0 Federico Builes 2022-09-13 07:13:03 +02:00
  • 950228f7f7 Bump @typescript-eslint/eslint-plugin from 5.36.2 to 5.37.0 dependabot[bot] 2022-09-13 03:40:44 +00:00
  • 6973819203 Bump eslint from 8.23.0 to 8.23.1 dependabot[bot] 2022-09-13 03:40:27 +00:00
  • eee2e3260e Merge pull request #235 from actions/dependabot/npm_and_yarn/ansi-styles-6.1.1 Federico Builes 2022-09-12 06:57:39 +02:00
  • 7eeddef885 adding dist Federico Builes 2022-09-12 06:56:41 +02:00
  • 8c58cdad09 Merge branch 'main' into dependabot/npm_and_yarn/ansi-styles-6.1.1 Federico Builes 2022-09-12 06:56:12 +02:00
  • 380290a89b Merge pull request #234 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.0.4 Federico Builes 2022-09-12 06:54:43 +02:00
  • 50c3ed0ba6 Merge pull request #233 from actions/dependabot/npm_and_yarn/zod-3.19.1 Federico Builes 2022-09-12 06:54:18 +02:00
  • 0455501026 adding dist Federico Builes 2022-09-12 06:54:07 +02:00
  • bac3f038ac Bump ansi-styles from 6.1.0 to 6.1.1 dependabot[bot] 2022-09-12 01:55:42 +00:00
  • 2d81062605 Bump eslint-plugin-jest from 27.0.2 to 27.0.4 dependabot[bot] 2022-09-12 01:55:29 +00:00
  • 2ae4b932b7 Bump zod from 3.19.0 to 3.19.1 dependabot[bot] 2022-09-12 01:54:09 +00:00
  • c7d4075ae0 Merge pull request #232 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.0.2 Federico Builes 2022-09-09 08:45:35 +02:00
  • 49a0208abf Merge pull request #231 from actions/dependabot/npm_and_yarn/typescript-4.8.3 Federico Builes 2022-09-09 08:45:23 +02:00
  • 94941958fb Bump eslint-plugin-jest from 27.0.1 to 27.0.2 dependabot[bot] 2022-09-09 01:30:41 +00:00
  • 2764e60363 Bump typescript from 4.8.2 to 4.8.3 dependabot[bot] 2022-09-09 01:29:54 +00:00
  • bcd1b9ab86 Merge pull request #230 from actions/dependabot/npm_and_yarn/types/node-16.11.58 Federico Builes 2022-09-08 12:02:31 +02:00
  • d96759fedc Bump @types/node from 16.11.57 to 16.11.58 dependabot[bot] 2022-09-08 01:32:47 +00:00
  • bfd72e7da2 Merge pull request #229 from actions/dependabot/npm_and_yarn/zod-3.19.0 Federico Builes 2022-09-07 07:50:34 +02:00
  • d8efcf0c1f updating dist files Federico Builes 2022-09-07 07:47:22 +02:00
  • 3b74514266 Bump zod from 3.18.0 to 3.19.0 dependabot[bot] 2022-09-07 01:30:01 +00:00
  • 6dfe5fd567 Force line-breaks. Federico Builes 2022-09-06 14:36:50 +02:00
  • 71a0ed0a31 Updating the README to include instructions for both config file options. Federico Builes 2022-09-06 14:30:39 +02:00
  • 7a364ecd6b Merge pull request #226 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.36.2 Federico Builes 2022-09-06 09:29:02 +02:00
  • 435083feb7 Bump @typescript-eslint/eslint-plugin from 5.36.1 to 5.36.2 dependabot[bot] 2022-09-06 07:28:29 +00:00
  • 781a55eaaa Merge pull request #227 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.36.2 Federico Builes 2022-09-06 09:27:33 +02:00
  • 335c64c139 Bump @typescript-eslint/parser from 5.36.1 to 5.36.2 dependabot[bot] 2022-09-06 01:29:26 +00:00
  • af9a4fa160 Merge pull request #225 from actions/dependabot/npm_and_yarn/got-12.4.1 Federico Builes 2022-09-05 15:47:15 +02:00
  • 3e04d4bc87 Merge pull request #224 from actions/dependabot/npm_and_yarn/types/node-16.11.57 Federico Builes 2022-09-05 15:47:07 +02:00
  • be076ebeca Bump got from 12.3.1 to 12.4.1 dependabot[bot] 2022-09-05 12:50:09 +00:00
  • b74c52c335 Bump @types/node from 16.11.56 to 16.11.57 dependabot[bot] 2022-09-05 12:49:27 +00:00
  • 2233eb2b88 Merge pull request #222 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.36.1 Federico Builes 2022-08-31 08:11:10 +02:00