actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Commit Graph

  • 2224c7c05a npm run package to update dist Eli Reisman 2024-06-07 09:35:26 -07:00
  • 310ae5f6ae npm run package change-spdx-parser-alt Eli Reisman 2024-06-05 23:39:14 -07:00
  • 4fabda986c more SPDX unit tests to illustrate matching behavior Eli Reisman 2024-06-05 23:26:12 -07:00
  • c0630c2a88 Bump undici from 5.28.3 to 5.28.4 dependabot[bot] 2024-06-06 18:28:02 +00:00
  • dfbe08e4d2 update licenses pkg and tests Eli Reisman 2024-06-05 22:57:06 -07:00
  • 3fc792b939 complete test suite conversions; simplify fn name Eli Reisman 2024-06-05 16:52:10 -07:00
  • 748dfadbc3 register spdx lib as ES Module, start converting call sites to use new spdx pkg - TODO: update tests Eli Reisman 2024-06-05 12:19:12 -07:00
  • a97084db22 move jest to dev dependencies Eli Reisman 2024-06-05 14:51:16 -07:00
  • e7ebeffdf9 add @onebeyond/spdx-license-satisfies to DR Action project Eli Reisman 2024-06-05 11:06:49 -07:00
  • 72eb03d02c Merge pull request #781 from actions/release-v4.3.3 v4.3.3 Eli Reisman 2024-06-05 12:15:21 -07:00
  • 137d8b42ce bump to version v4.3.3 release-v4.3.3 Eli Reisman 2024-06-05 10:26:55 -07:00
  • e6b618ed05 Merge pull request #767 from actions/max-comment-length Eli Reisman 2024-06-04 13:03:31 -07:00
  • 3c42649204 fix ws for linter max-comment-length Eli Reisman 2024-06-04 12:33:48 -07:00
  • 8e6ea8d29b update packaging Eli Reisman 2024-06-04 12:30:34 -07:00
  • 1b3d2772d0 post-review: add PR comment full summary test case Eli Reisman 2024-06-04 12:30:05 -07:00
  • 220872c81a Update src/main.ts Eli Reisman 2024-06-04 12:14:40 -07:00
  • 087d0f81a5 repackage to update dist Eli Reisman 2024-06-04 11:15:03 -07:00
  • 4531204be7 whitespace Eli Reisman 2024-06-04 11:45:43 -07:00
  • df1ca890c5 appease linter Eli Reisman 2024-06-04 11:41:21 -07:00
  • 97c6dd59c3 run prettier to clear linter warnings Eli Reisman 2024-06-04 11:25:38 -07:00
  • 0bec1ca5b4 clean up list formatting for PR comment Eli Reisman 2024-06-04 09:53:42 -07:00
  • 5460632ba9 WIP: summary test Eli Reisman 2024-06-03 19:17:51 -07:00
  • f7aca4f481 refactor to dedup min summary generation Eli Reisman 2024-06-03 15:42:37 -07:00
  • 1988567896 re-apply set output for comment-content Eli Reisman 2024-06-03 12:22:38 -07:00
  • 1e26117d02 Fix extra whitespace in list Justin Hutchings 2024-05-06 00:38:24 +00:00
  • b1e704b9d6 Fix bug where I replaced the comment in the wrong spot Justin Hutchings 2024-05-06 00:32:50 +00:00
  • 48fae2e703 Add min-comment to fix max-comment length issue Justin Hutchings 2024-05-06 00:26:50 +00:00
  • 67be14a8b1 clean up list formatting for PR comment max-comment-length-WIP Eli Reisman 2024-06-04 09:53:42 -07:00
  • 8d625cd32e Merge pull request #777 from actions/jonjanego-issue-templates Jon Janego 2024-06-04 11:41:12 -05:00
  • 3afc0d4eaa Merge pull request #778 from actions/jonjanego-contribution-updates Jon Janego 2024-06-04 09:59:36 -05:00
  • bc8dee91fe Update CONTRIBUTING.md jonjanego-contribution-updates Jon Janego 2024-06-04 09:58:59 -05:00
  • 0669e2939d Update CONTRIBUTING.md Jon Janego 2024-06-04 09:45:14 -05:00
  • fd46ab736e Update CONTRIBUTING.md Jon Janego 2024-06-04 09:01:11 -05:00
  • 551e0b82bd Update CONTRIBUTING.md Jon Janego 2024-06-04 08:59:20 -05:00
  • dd39bab1d5 WIP: summary test Eli Reisman 2024-06-03 19:17:51 -07:00
  • ee4c3fe98e refactor to dedup min summary generation Eli Reisman 2024-06-03 15:42:37 -07:00
  • fbfa3f19c8 Update SECURITY.md Jon Janego 2024-06-03 16:59:30 -05:00
  • 89204de987 Create config.yml jonjanego-issue-templates Jon Janego 2024-06-03 16:48:33 -05:00
  • 6d4e634e06 Create issue templates Jon Janego 2024-06-03 16:43:33 -05:00
  • 4c5eeccebb Update CONTRIBUTING.md Jon Janego 2024-06-03 16:18:38 -05:00
  • 9acd43a1b5 re-apply set output for comment-content Eli Reisman 2024-06-03 12:22:38 -07:00
  • f6e67d2f8d Merge pull request #776 from ramann/patch-1 Jon Janego 2024-06-03 12:54:46 -05:00
  • eb0576373a fix show-openssf-scorecard-levels input robert 2024-06-03 12:20:08 -04:00
  • 981e960c8c Merge pull request #773 from am-stead/am-stead-patch-1 Jon Janego 2024-05-30 09:23:53 -05:00
  • 87b53ae475 add line break Anne-Marie 2024-05-30 11:10:36 +00:00
  • c601a5a741 combining Output notes Anne-Marie 2024-05-30 11:02:59 +00:00
  • 5751523f41 Update README.md Jon Janego 2024-05-29 13:21:44 -05:00
  • 3fe3159bb9 Indenting to match vulnerable-changes Anne-Marie 2024-05-27 09:15:58 +02:00
  • 2d3c93c0e0 Update README.md Anne-Marie 2024-05-27 09:14:01 +02:00
  • 9770b8da2c Update README.md Anne-Marie 2024-05-27 09:13:46 +02:00
  • d5b8317942 edits Anne-Marie 2024-05-24 07:35:18 +00:00
  • d3670a3e49 updating GHES links Anne-Marie 2024-05-23 10:38:06 +00:00
  • f38966fbec updating overview Anne-Marie 2024-05-23 10:26:42 +00:00
  • 9eb0dccbc9 editing configuration and remaining sections Anne-Marie 2024-05-23 10:03:57 +00:00
  • 258a2295c6 installation section Anne-Marie 2024-05-23 09:37:47 +00:00
  • 4c0a483c95 Update README.md Anne-Marie 2024-05-23 10:22:01 +02:00
  • 339e2e1bfc Merge pull request #741 from josieang/deps-dev-v3 Eli Reisman 2024-05-10 14:23:17 -07:00
  • 40cd879447 npm install && npm run build && npm run package Josie Anugerah 2024-05-07 08:11:58 +10:00
  • d11eeb39d8 Merge branch 'main' into deps-dev-v3 Josie Anugerah 2024-05-06 17:26:48 +10:00
  • 5391bdd8f8 Fix extra whitespace in list Justin Hutchings 2024-05-06 00:38:24 +00:00
  • 0bbf945c18 Fix bug where I replaced the comment in the wrong spot Justin Hutchings 2024-05-06 00:32:50 +00:00
  • 5bcfdbcf1c Add min-comment to fix max-comment length issue Justin Hutchings 2024-05-06 00:26:50 +00:00
  • 82ab8f69c7 Merge pull request #765 from actions/juxtin/allow-slashes-in-purls Justin Holguín 2024-05-02 13:30:20 -07:00
  • 432d8e7efe Allow slashes in purl package names Justin Holguín 2024-05-02 19:07:02 +00:00
  • 0c155c5e85 Merge pull request #762 from actions/juxtin/prepare-4.3.2 v4.3.2 Justin Holguín 2024-04-30 09:39:04 -07:00
  • f3dac32d35 Merge pull request #761 from actions/juxtin/fix-allow-dependencies-licenses Justin Holguín 2024-04-30 09:38:44 -07:00
  • d0d5cc3ec4 Update version number to 4.3.2 Justin Holguín 2024-04-30 16:30:51 +00:00
  • 49fbbe0acb Fix package-url parsing for allow-dependencies-licenses Justin Holguín 2024-04-29 23:24:15 +00:00
  • e58c696e52 Merge pull request #758 from actions/juxtin/prepare-4.3.1 v4.3.1 v4.3.0 Justin Holguín 2024-04-29 10:48:18 -07:00
  • 9b7c72ddcd Change version to 4.3.1 Justin Holguín 2024-04-29 17:45:21 +00:00
  • 7dcfabfea2 Merge pull request #753 from actions/juxtin/debug-purl Justin Holguín 2024-04-29 10:43:30 -07:00
  • 5f0808ffb1 Validate that deny-packages purls are complete juxtin/debug-purl Justin Holguín 2024-04-29 16:46:21 +00:00
  • fcc66c23b3 Refine purl parsing and tests Justin Holguín 2024-04-28 20:33:37 +00:00
  • 1dd418bcb3 Basic tests for PURL validation in config Justin Holguín 2024-04-27 22:10:57 +00:00
  • 640617990f Replace packageurl-js with our own implementation Justin Holguín 2024-04-27 20:54:20 +00:00
  • 2034babb6b Bypass purls (mostly) for deny checks Justin Holguín 2024-04-26 22:13:45 +00:00
  • 7e773b1e98 Log offending purl Justin Holguín 2024-04-26 21:50:12 +00:00
  • a3460920cc Parse purls cautiously in getDeniedChanges Justin Holguín 2024-04-26 21:28:24 +00:00
  • 0659a74c94 Merge pull request #751 from actions/juxtin/release V4.3.0 Justin Holguín 2024-04-26 10:26:45 -07:00
  • 28facf5722 Update release instructions juxtin/release Justin Holguín 2024-04-26 17:11:57 +00:00
  • 5ab7b74146 Update package-lock.json Justin Holguín 2024-04-26 17:11:46 +00:00
  • 2a28e93881 Merge branch 'main' into deps-dev-v3 Josie Anugerah 2024-04-26 14:10:34 +10:00
  • 95b6fa4e6b Update version to 4.3.0 Justin Holguín 2024-04-25 22:41:44 +00:00
  • 2dba7fdde1 Merge pull request #733 from actions/deny-list-version Brandon Teng 2024-04-24 20:38:16 -05:00
  • 7d44c7c392 building package with latest typescript version Brandon Teng 2024-04-24 20:36:47 -05:00
  • ce31ee8325 Merge branch 'main' into deny-list-version Brandon Teng 2024-04-24 18:16:35 -05:00
  • df1b3661fd Merge pull request #750 from actions/juxtin/fix-deny-icon Justin Holguín 2024-04-24 15:37:25 -07:00
  • 71c57a6108 Merge branch 'main' into deny-list-version Brandon Teng 2024-04-24 17:19:53 -05:00
  • 7e2c3c347b Show denied packages with red X Justin Holguín 2024-04-24 22:11:24 +00:00
  • f456418f6a Merge pull request #737 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.2 Justin Holguín 2024-04-24 14:59:31 -07:00
  • 19bd35e07b Merge pull request #744 from actions/dependabot/npm_and_yarn/typescript-5.4.5 Justin Holguín 2024-04-24 14:57:23 -07:00
  • ff97293707 Update dist Justin Holguín 2024-04-24 21:55:26 +00:00
  • 5498b6c4c3 Bump typescript from 5.3.3 to 5.4.5 dependabot[bot] 2024-04-24 21:39:33 +00:00
  • 80116a4564 Merge branch 'main' into deny-list-version Brandon Teng 2024-04-24 16:35:05 -05:00
  • 68488bcecb Merge pull request #748 from actions/issue-738 Justin Holguín 2024-04-24 13:54:40 -07:00
  • 16a0212a77 Build source issue-738 Justin Hutchings 2024-04-23 17:31:55 +00:00
  • 6d3fba9bf2 Remove extra https:// Justin Hutchings 2024-04-23 17:26:55 +00:00
  • 671683931a run npm run all Josie Anugerah 2024-04-17 13:31:49 -07:00
  • c6cc8585a0 building and packaging action Brandon Teng 2024-04-16 16:25:58 -05:00
  • c32a0148b3 throwing parsing error up instead of swallowing it Brandon Teng 2024-04-16 16:25:28 -05:00