actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 74dbdf9819 Merge pull request #112 from actions/move-config-file Federico Builes 2022-06-15 11:53:18 +02:00
  • f3f3519b2a Merge branch 'main' into move-config-file move-config-file Federico Builes 2022-06-15 06:43:18 +02:00
  • 216910dd9a Merge pull request #113 from actions/dependabot/npm_and_yarn/prettier-2.7.0 Federico Builes 2022-06-15 06:42:57 +02:00
  • eb561ba6bd Bump prettier from 2.6.2 to 2.7.0 dependabot[bot] 2022-06-15 03:36:59 +00:00
  • 3f246861d8 Merge pull request #114 from actions/dependabot/npm_and_yarn/types/node-17.0.43 Federico Builes 2022-06-15 05:36:17 +02:00
  • faa63c3cba adding dist Federico Builes 2022-06-15 05:21:16 +02:00
  • dfd519642f Update schemas.ts Courtney Claessens 2022-06-14 22:37:00 -04:00
  • 871f4064a1 adding doc for protected branches Courtney Claessens 2022-06-14 22:32:34 -04:00
  • d6f6abdda3 Bump @types/node from 17.0.42 to 17.0.43 dependabot[bot] 2022-06-15 01:44:34 +00:00
  • 54764c9203 Update README.md Courtney Claessens 2022-06-14 12:16:03 -04:00
  • c6587b663d Updating README with instructions for unknown licenses. Federico Builes 2022-06-14 14:11:01 +02:00
  • 42e2bc1ed2 Handle unknown licenses. Federico Builes 2022-06-14 13:54:27 +02:00
  • 0b87f02bee Document how we test inputs Federico Builes 2022-06-14 13:00:18 +02:00
  • 00be2ce1fc Typos. Federico Builes 2022-06-14 12:27:56 +02:00
  • 2860b57e48 Update README.md Federico Builes 2022-06-14 12:24:27 +02:00
  • fd6e756c7b Updating readConfig() to be more readable, get rid of typecasts. Federico Builes 2022-06-14 11:29:13 +02:00
  • f83a407eb9 Use the correct name for allowlists. Federico Builes 2022-06-14 09:46:59 +02:00
  • b0e1f384d7 Linting YAML Federico Builes 2022-06-14 09:05:05 +02:00
  • c973154c92 Dashes instead of underscores. Federico Builes 2022-06-14 07:50:25 +02:00
  • 3355ec4be5 adding dist Federico Builes 2022-06-14 07:44:17 +02:00
  • 76ad37608d Adding more tests for the config file. Federico Builes 2022-06-14 07:42:51 +02:00
  • 3eff3f5918 let => const Federico Builes 2022-06-14 07:42:13 +02:00
  • 7278093fa0 Clarify some of the error messages. Federico Builes 2022-06-14 07:41:37 +02:00
  • b5b49104d4 Adding the config definition to action.yml Federico Builes 2022-06-14 07:40:16 +02:00
  • e56fe29417 Remove old config file. Federico Builes 2022-06-14 07:38:45 +02:00
  • cc3101831d Updating dist. Federico Builes 2022-06-14 07:04:33 +02:00
  • ef97470a0f Don't set the defaults in the test :/ Federico Builes 2022-06-14 07:04:26 +02:00
  • efecf6fd09 Remove the variables from env so they don't default to empty strings. Federico Builes 2022-06-14 06:49:18 +02:00
  • 24d7ef3c5d Use an empty config options type. Federico Builes 2022-06-14 06:48:58 +02:00
  • 01fa67b82e adding dist Federico Builes 2022-06-14 06:26:18 +02:00
  • 1791775ce6 temp commit Federico Builes 2022-06-13 19:55:08 +02:00
  • 92f1ecaaea Merge pull request #106 from actions/adding-lists Federico Builes 2022-06-14 04:45:37 +02:00
  • 47d4ff9127 Merge pull request #111 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.28.0 Federico Builes 2022-06-14 04:45:19 +02:00
  • 9c5310eee9 Bump @typescript-eslint/parser from 5.27.1 to 5.28.0 dependabot[bot] 2022-06-14 02:44:10 +00:00
  • d616ba30f2 Merge pull request #110 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.28.0 Federico Builes 2022-06-14 04:43:24 +02:00
  • 7181a20a1f Bump @typescript-eslint/eslint-plugin from 5.27.1 to 5.28.0 dependabot[bot] 2022-06-14 01:45:00 +00:00
  • eebebcdc2a Use real PURLs in tests Federico Builes 2022-06-13 20:19:01 +02:00
  • 571f236610 Improved wording on license messages. Federico Builes 2022-06-13 20:08:16 +02:00
  • fe78920139 Document unwanted behavior for a future refactoring. Federico Builes 2022-06-13 20:04:39 +02:00
  • bd115a9b66 Merge pull request #108 from actions/dependabot/npm_and_yarn/types/node-17.0.42 Federico Builes 2022-06-13 11:36:18 +02:00
  • 72a5a0f647 Bump @types/node from 17.0.40 to 17.0.42 dependabot[bot] 2022-06-13 01:44:57 +00:00
  • 21412fec7b fixing dist check Federico Builes 2022-06-09 10:46:00 +02:00
  • 0777fbe61e Updating dist. Federico Builes 2022-06-09 10:42:56 +02:00
  • cc22dcd654 Use undefined instead of null when dealing with lists. Federico Builes 2022-06-09 10:42:31 +02:00
  • 6b5518a9ed Adding more docs to licenses.ts Federico Builes 2022-06-09 10:33:05 +02:00
  • 23bc3cbcbc temp home for ghes-related logic adding-enterprise-support Federico Builes 2022-06-09 07:59:36 +02:00
  • 20cca5c0c4 The default settings should not use []. Federico Builes 2022-06-08 18:28:10 +02:00
  • a51db20961 Use null for unspecified values when filtering licenses. Federico Builes 2022-06-08 18:21:28 +02:00
  • a7d02aef82 adding dist Federico Builes 2022-06-08 17:47:06 +02:00
  • 4ac3d318ab Refactoring on PR feedback. Federico Builes 2022-06-08 17:45:42 +02:00
  • 25271922eb Clarify variable names. Federico Builes 2022-06-08 15:53:14 +02:00
  • 4474253eb8 Merge branch 'main' into adding-lists Federico Builes 2022-06-07 06:23:53 +02:00
  • 1a7225bc91 Merge pull request #104 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.1 Federico Builes 2022-06-07 06:20:33 +02:00
  • 4ebaca3419 Merge pull request #105 from actions/dependabot/npm_and_yarn/yaml-2.1.1 Federico Builes 2022-06-07 06:20:17 +02:00
  • a96d28f120 Remove configuration docs until we have a proper release. Federico Builes 2022-06-07 06:19:13 +02:00
  • 29b67f0a05 Bump @typescript-eslint/parser from 5.27.0 to 5.27.1 dependabot[bot] 2022-06-07 04:16:25 +00:00
  • c187f6f12d Merge pull request #103 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.1 Federico Builes 2022-06-07 06:15:32 +02:00
  • 3b0a091baa Bump yaml from 2.1.0 to 2.1.1 dependabot[bot] 2022-06-07 01:33:07 +00:00
  • 3456819f12 Bump @typescript-eslint/eslint-plugin from 5.27.0 to 5.27.1 dependabot[bot] 2022-06-07 01:32:39 +00:00
  • 56e63b1bc5 adding dist Federico Builes 2022-06-06 18:08:56 +02:00
  • 2ae9a2d51b Add logic for denied licenses. Federico Builes 2022-06-06 18:06:48 +02:00
  • 1261e18905 Clarify license tests. Federico Builes 2022-06-06 18:06:00 +02:00
  • dc7b0a2788 Show an error when disallowed dependencies show up. Federico Builes 2022-06-06 17:46:22 +02:00
  • 06297bf229 Fixing failing tests Federico Builes 2022-06-06 17:31:33 +02:00
  • bccacf9708 Skeleton for license validation. Federico Builes 2022-06-06 17:07:26 +02:00
  • 8c646c1c91 Get rid of redundant variables. Federico Builes 2022-06-06 17:06:16 +02:00
  • 30c4549c8c Merge pull request #91 from actions/adding-config-file Federico Builes 2022-06-06 20:32:21 +02:00
  • 93c8cb2c8a Merge pull request #101 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.5.3 Federico Builes 2022-06-06 13:43:17 +02:00
  • d7c6d6203f Merge pull request #100 from actions/dependabot/npm_and_yarn/esbuild-register-3.3.3 Federico Builes 2022-06-06 13:34:38 +02:00
  • 92bcc5a0bf Bump esbuild-register from 3.3.2 to 3.3.3 dependabot[bot] 2022-06-06 11:32:09 +00:00
  • 545050ada5 Merge pull request #99 from actions/dependabot/npm_and_yarn/eslint-8.17.0 Federico Builes 2022-06-06 13:31:00 +02:00
  • 2b674f0e26 Merge pull request #98 from actions/dependabot/npm_and_yarn/types/node-17.0.40 Federico Builes 2022-06-06 13:30:45 +02:00
  • 802525536f Merge pull request #97 from actions/dependabot/npm_and_yarn/typescript-4.7.3 Federico Builes 2022-06-06 13:30:28 +02:00
  • 4eb9ad1d38 Bump eslint-plugin-jest from 26.4.6 to 26.5.3 dependabot[bot] 2022-06-06 01:49:06 +00:00
  • 12cf02f216 Bump eslint from 8.16.0 to 8.17.0 dependabot[bot] 2022-06-06 01:48:31 +00:00
  • c7ff505b05 Bump @types/node from 17.0.38 to 17.0.40 dependabot[bot] 2022-06-06 01:48:14 +00:00
  • 90221b23f7 Bump typescript from 4.7.2 to 4.7.3 dependabot[bot] 2022-06-06 01:47:20 +00:00
  • 2f38c7e78c Add severity level to the vulns not found message. Federico Builes 2022-06-01 15:56:16 +02:00
  • c235374b9d Removing redundant test. Federico Builes 2022-06-01 13:42:22 +02:00
  • ae2949c9c1 Removing old file. Federico Builes 2022-06-01 13:40:09 +02:00
  • 3ae540bf96 Updating the README with config instructions. Federico Builes 2022-06-01 13:39:05 +02:00
  • 1c15a1745e Adding dependency-review.yml. Federico Builes 2022-06-01 13:38:42 +02:00
  • 19b36f0933 Use a more definitive name for the config file. Federico Builes 2022-06-01 13:28:03 +02:00
  • 0b9547aabf Adding more expectations for severities. Federico Builes 2022-06-01 13:14:32 +02:00
  • b327132e4b Remove state from the filtering function. Federico Builes 2022-06-01 13:10:58 +02:00
  • f9a13e70f4 Fixing circular reference, adding prettier. Federico Builes 2022-06-01 12:09:11 +02:00
  • db9f724163 Introduce a schema for ConfigurationOptions. Federico Builes 2022-06-01 06:36:02 +02:00
  • 7db11574b7 Make vulnerabilities be [] by default. Federico Builes 2022-06-01 05:36:46 +02:00
  • 7063d0ca45 Don't modify array in place. Federico Builes 2022-06-01 05:32:50 +02:00
  • 2dd55385c1 Use let instead of var, fix failing test. Federico Builes 2022-06-01 05:31:33 +02:00
  • 48729e4e38 Merge pull request #96 from actions/dependabot/npm_and_yarn/types/node-17.0.38 Federico Builes 2022-06-01 04:48:28 +02:00
  • 230442bc30 Bump @types/node from 17.0.36 to 17.0.38 dependabot[bot] 2022-06-01 01:54:46 +00:00
  • 4235242818 adding dist files Federico Builes 2022-05-31 17:09:21 +02:00
  • 731e67eca2 Add filtering by low severity as the default. Federico Builes 2022-05-31 17:08:22 +02:00
  • b601c09c4e Merge branch 'main' into adding-config-file Federico Builes 2022-05-31 16:59:33 +02:00
  • 982e1d16cb Whitespace and newlines. Federico Builes 2022-05-31 16:54:59 +02:00
  • f0a04841ce Adding logic to filter by vulnerability severity. Federico Builes 2022-05-31 16:50:39 +02:00
  • e622e72c6f Export Change schema. Federico Builes 2022-05-31 06:06:19 +02:00
  • 92e40d7290 Move printing function out. Federico Builes 2022-05-31 06:03:42 +02:00
  • 21763d05e0 Merge pull request #94 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.4.6 Federico Builes 2022-05-31 05:25:05 +02:00