actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Commit Graph

  • c26b132baa fix typos omahs 2025-02-07 13:22:20 +01:00
  • 3ffdd4d73e fix typos omahs 2025-02-07 13:20:46 +01:00
  • ea2cae5127 Merge pull request #888 from ellenfieldn/allow-deny-package-removal Ashely Tenesaca 2025-02-06 17:18:15 -05:00
  • dfe560420d fix formatting and dist Nathan Ellenfield 2025-02-05 15:50:50 -05:00
  • e4033dcc29 Merge remote-tracking branch 'origin/main' into allow-deny-package-removal Nathan Ellenfield 2025-02-04 13:33:03 -05:00
  • 92129e58e4 Merge pull request #891 from actions/ashelytc/server-url-fix Ashely Tenesaca 2025-02-03 14:46:11 -05:00
  • bf9bc3f2a6 generate dist code Ashely Tenesaca 2025-02-03 17:25:46 +00:00
  • d703cf58c3 replace server url with variable Ashely Tenesaca 2025-02-03 15:57:21 +00:00
  • c80eb9894b fixit Nathan Ellenfield 2025-01-27 16:01:10 -05:00
  • 5e7a6ffc7d fix: Allow removal denied packages Nathan Ellenfield 2025-01-27 15:54:27 -05:00
  • c665328b35 Make 'None' to be a text instead of list fabasoad 2025-01-26 22:36:42 +09:00
  • 5370d75f36 To not print OpenSSF Scorecard section if no dependencies scanned fabasoad 2025-01-25 23:28:54 +09:00
  • 7f3cd87ec0 Fix usage of this action in dependency-review.yml fabasoad 2025-01-25 23:11:35 +09:00
  • 67ca5cc413 Merge pull request #877 from actions/dependabot/npm_and_yarn/undici-5.28.5 Ahmed ElMallah 2025-01-24 12:04:24 -08:00
  • 8992b0e1c7 updating dist code Ahmed ElMallah 2025-01-24 20:01:21 +00:00
  • 5e9a56c6de Merge pull request #878 from actions/dependabot/github_actions/actions/stale-9.1.0 Ahmed ElMallah 2025-01-24 11:58:00 -08:00
  • 9cd1f01f7f Bump actions/stale from 9.0.0 to 9.1.0 dependabot[bot] 2025-01-24 19:52:48 +00:00
  • a0be92bfc2 Merge pull request #876 from actions/ahmed3lmallah/dependabot-updates Ahmed ElMallah 2025-01-24 11:52:11 -08:00
  • 6ec8e13b9a Bump undici from 5.28.4 to 5.28.5 dependabot[bot] 2025-01-24 17:39:09 +00:00
  • c9bb42fdbf grouping minor and patch updates to lessen the number of PRs ahmed3lmallah/dependabot-updates Ahmed ElMallah 2025-01-23 23:01:53 +00:00
  • b109bc8c95 Merge pull request #870 from actions/ahmed3lmallah/updating-dependencies Ahmed ElMallah 2025-01-23 14:00:10 -08:00
  • 5f24a51147 Updating dist folder ahmed3lmallah/updating-dependencies Ahmed ElMallah 2025-01-23 21:07:48 +00:00
  • ef281d4e24 Updating multiple dependency versions Ahmed ElMallah 2025-01-23 21:07:39 +00:00
  • 67fc6dd646 Update compiled assets Paul Scheunemann 2025-01-09 15:15:09 +01:00
  • 2caab057ed Update transitive dependency spdx-license-ids Paul Scheunemann 2024-12-06 16:34:46 +01:00
  • 3b139cfc5f Merge pull request #851 from actions/ahmed3lmallah/prepare-for-4.5.0-release v4.5.0 Ahmed ElMallah 2024-11-20 13:49:04 -08:00
  • d6807b6643 updating generated code ahmed3lmallah/prepare-for-4.5.0-release Ahmed ElMallah 2024-11-20 21:42:05 +00:00
  • c89b41fdc6 addressing lint issues Ahmed ElMallah 2024-11-20 21:41:54 +00:00
  • eee97d8b03 incrementing project version Ahmed ElMallah 2024-11-20 21:41:43 +00:00
  • 9d101822a3 Merge pull request #827 from ebickle/fix/comment-warn-only Ahmed ElMallah 2024-11-20 13:28:17 -08:00
  • 9192be9c72 Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538 Ahmed ElMallah 2024-11-19 14:42:32 -08:00
  • 2fc8e23b12 Using cross-spawn safe version ahmed3lmallah/adressing-CVE-2024-21538 Ahmed ElMallah 2024-11-19 22:26:34 +00:00
  • fb86db2043 fix: resolve race conditions in async core.group calls Eric Bickle 2024-11-19 14:17:06 -08:00
  • 0a198ab3ed fix: replace integer failureCount with boolean Eric Bickle 2024-11-19 13:15:15 -08:00
  • fc499fc13a Merge branch 'main' into fix/comment-warn-only Eric Bickle 2024-11-19 12:51:47 -08:00
  • b02ea3a88b Merge pull request #849 from actions/dependabot/npm_and_yarn/vercel/ncc-0.38.3 Ahmed ElMallah 2024-11-18 15:14:46 -08:00
  • 612e96e757 updating dist code Ahmed ElMallah 2024-11-18 22:36:35 +00:00
  • 0adc9b8215 Merge pull request #847 from actions/dependabot/npm_and_yarn/nodemon-3.1.7 Ahmed ElMallah 2024-11-18 13:05:25 -08:00
  • 591cbf9044 Bump @vercel/ncc from 0.38.1 to 0.38.3 dependabot[bot] 2024-11-18 01:28:26 +00:00
  • c0a5e20c51 Bump nodemon from 3.1.0 to 3.1.7 dependabot[bot] 2024-11-04 01:59:13 +00:00
  • c82883d789 Merge pull request #844 from actions/dependabot/npm_and_yarn/got-14.4.3 Eli Reisman 2024-10-28 16:23:56 -07:00
  • 4081bf99e2 Merge pull request #846 from actions/merge-group-bug-fix v4.4.0 Ahmed ElMallah 2024-10-28 11:42:18 -07:00
  • 03e585eea7 fixing minor typo merge-group-bug-fix ahmed3lmallah 2024-10-27 23:34:29 -07:00
  • 08b4117924 updating dist code ahmed3lmallah 2024-10-27 23:30:45 -07:00
  • 9c3441f7ee updating dist code ahmed3lmallah 2024-10-27 23:12:50 -07:00
  • 304a544dca updating tests ahmed3lmallah 2024-10-27 23:11:58 -07:00
  • e99353b1e1 fixing merge_group schema bug ahmed3lmallah 2024-10-27 22:56:44 -07:00
  • d8ae44e2a0 Bump got from 14.4.2 to 14.4.3 dependabot[bot] 2024-10-28 01:10:40 +00:00
  • a6993e2c61 Merge pull request #840 from actions/dependabot-updates v4.3.5 Ahmed ElMallah 2024-10-21 15:29:33 -07:00
  • d92f08b3ff Bump eslint-plugin-jest and ts-jest dependabot-updates ahmed3lmallah 2024-10-21 15:16:32 -07:00
  • 3e334b7ca7 Merge pull request #822 from actions/dependabot/npm_and_yarn/got-14.4.2 Barry Gordon 2024-09-30 16:17:18 +01:00
  • 32b7d886d5 Merge pull request #832 from actions/jonjanego-patch-3 Jon Janego 2024-09-26 12:51:51 -05:00
  • 14b94f8fbc Update stale.yaml Jon Janego 2024-09-26 11:47:03 -05:00
  • 6ea3b24563 Merge pull request #828 from actions/hm/summary Eli Reisman 2024-09-16 15:28:19 -07:00
  • 05042db2b6 update dist packaging hm/summary Eli Reisman 2024-09-16 12:42:46 -07:00
  • 6aacbe0934 add a warning message if there is room in the summary prior to cutoff Eli Reisman 2024-09-16 12:42:35 -07:00
  • 293ccdb6e9 add truncation escape valve to new file summary to avoid overflow Eli Reisman 2024-09-16 12:26:36 -07:00
  • 83c7cc6aa7 Do not list changes dependencies in summary Henri Maurer 2024-09-13 14:10:13 +01:00
  • b3559aa82e Merge pull request #829 from actions/elireisman/sec-findings-update Eli Reisman 2024-09-16 10:04:59 -07:00
  • 8179e6abd6 upgrade micromatch within given dependent parent pkg bounds but past security vuln elireisman/sec-findings-update Eli Reisman 2024-09-16 09:53:44 -07:00
  • ac1d2d7d35 fix: add summary comment on failure when warn-only: true Eric Bickle 2024-08-19 07:30:39 -07:00
  • b1c898035c Update summary.ts jj-summary-truncate Jon Janego 2024-09-03 11:45:57 -05:00
  • bb49ef985c Update main.ts Jon Janego 2024-09-03 11:43:30 -05:00
  • 431ce2fe42 Update summary.ts Jon Janego 2024-09-03 10:47:30 -05:00
  • fe833075f3 Bump got from 14.4.1 to 14.4.2 dependabot[bot] 2024-08-26 01:38:54 +00:00
  • 526b7f2f9b Merge pull request #815 from actions/dependabot/npm_and_yarn/types/node-20.16.0 Eli Reisman 2024-08-19 10:31:48 -07:00
  • e5cb30f678 Bump @types/node from 20.11.28 to 20.16.0 dependabot[bot] 2024-08-19 01:33:46 +00:00
  • 90820aba8c Merge pull request #793 from actions/jonjanego-patch-1 Jon Janego 2024-07-12 16:13:55 -05:00
  • 7367319600 Merge pull request #794 from actions/jonjanego-patch-2 Jon Janego 2024-07-12 16:11:24 -05:00
  • affc3a4f15 Create pull_request_template.md jonjanego-patch-2 Jon Janego 2024-07-12 16:07:23 -05:00
  • 07d3c7257a Update CONTRIBUTING.md jonjanego-patch-1 Jon Janego 2024-07-12 15:58:13 -05:00
  • a2dda6f539 Merge pull request #766 from louis-bompart/main Justin Holguín 2024-07-12 12:55:37 -07:00
  • 45dc50cabe fix: getRefs function to handle merge_group events Louis Bompart 2024-07-12 14:20:42 +02:00
  • 5a2ce3f5b9 Merge pull request #791 from actions/juxtin/update-version v4.3.4 Justin Holguín 2024-07-11 13:47:10 -07:00
  • ac6a6adece Prepare even more for v4.3.4 Justin Holguín 2024-07-11 20:39:43 +00:00
  • 3e2b91798f Merge pull request #790 from actions/juxtin/update-version Justin Holguín 2024-07-11 13:38:12 -07:00
  • d9ab9c8c45 Update version in package.json Justin Holguín 2024-07-11 18:57:29 +00:00
  • 8c152c7a0f Merge pull request #769 from actions/dependabot/npm_and_yarn/zod-3.23.8 Justin Holguín 2024-07-10 10:50:09 -07:00
  • 0085d30a6f Update dist Justin Holguín 2024-07-10 17:47:42 +00:00
  • 08b5bf2921 Bump zod from 3.22.4 to 3.23.8 dependabot[bot] 2024-07-10 17:43:18 +00:00
  • 986fce9040 Merge pull request #784 from actions/dependabot/npm_and_yarn/got-14.4.1 Justin Holguín 2024-07-10 10:41:24 -07:00
  • 28743f8570 Merge pull request #719 from actions/change-spdx-parser Justin Holguín 2024-07-10 10:06:31 -07:00
  • d6f34c3a26 Merge pull request #789 from actions/dependabot/npm_and_yarn/braces-3.0.3 Justin Holguín 2024-07-08 14:53:16 -07:00
  • 465867cec8 Bump braces from 3.0.2 to 3.0.3 dependabot[bot] 2024-07-08 21:49:13 +00:00
  • 455d760c6a regen dist elireisman/quickfix-summary Eli Reisman 2024-07-04 00:06:17 +00:00
  • 46a56b892b short-term fix: hard truncate core.summary if it is over 1024k size limit Eli Reisman 2024-07-04 00:05:52 +00:00
  • b4ae47ca2c Properly display test failures using jest Justin Holguín 2024-06-10 23:07:07 +00:00
  • d85edeb45d remove redundant declaration from TS types module registration Eli Reisman 2024-06-10 10:11:00 -07:00
  • f60d59372e npm run package Eli Reisman 2024-06-05 23:39:14 -07:00
  • ed624dba72 more SPDX unit tests to illustrate matching behavior Eli Reisman 2024-06-05 23:26:12 -07:00
  • bbed6f340a update licenses pkg and tests Eli Reisman 2024-06-05 22:57:06 -07:00
  • 2e4eaa490e complete test suite conversions; simplify fn name Eli Reisman 2024-06-05 16:52:10 -07:00
  • ecd706f525 register spdx lib as ES Module, start converting call sites to use new spdx pkg - TODO: update tests Eli Reisman 2024-06-05 12:19:12 -07:00
  • bc5b235cf6 move jest to dev dependencies Eli Reisman 2024-06-05 14:51:16 -07:00
  • 154c1500f3 add @onebeyond/spdx-license-satisfies to DR Action project Eli Reisman 2024-06-05 11:06:49 -07:00
  • 2115d9eeea Bump got from 14.2.0 to 14.4.1 dependabot[bot] 2024-06-10 01:18:26 +00:00
  • df5d74f5d3 Merge pull request #783 from actions/elireisman/all-changes-to-scorecard Eli Reisman 2024-06-07 14:15:00 -07:00
  • 1e5b2e69a2 npm run package elireisman/all-changes-to-scorecard Eli Reisman 2024-06-07 10:00:47 -07:00
  • e69288dbec only filter out removed changes from the original PR diff when adding scorecard entries in DR Action report Eli Reisman 2024-06-07 10:00:37 -07:00
  • 8285e75fb2 Merge pull request #782 from actions/dependabot/npm_and_yarn/undici-5.28.4 Eli Reisman 2024-06-07 09:44:10 -07:00