cla-bot

cla-bot copied to clipboard

## CVE-2021-3918 - High Severity Vulnerability Vulnerable Library - json-schema-0.2.3.tgz JSON Schema validation and specifications Library home page: https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz Path to dependency file: /package.json Path to vulnerable library: /node_modules/json-schema/package.json Dependency...

mend-for-github-com[bot]

## CVE-2021-23369 - High Severity Vulnerability Vulnerable Library - handlebars-4.4.2.tgz Handlebars provides the power necessary to let you build semantic templates effectively with no frustration Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.4.2.tgz Path...

mend-for-github-com[bot]

## CVE-2019-20922 - High Severity Vulnerability Vulnerable Library - handlebars-4.4.2.tgz Handlebars provides the power necessary to let you build semantic templates effectively with no frustration Library home page: https://registry.npmjs.org/handlebars/-/handlebars-4.4.2.tgz Path...

mend-for-github-com[bot]

According to https://colineberhardt.github.io/cla-bot/#configuration-options > With each invocation, the checkContributor querystring parameter is used to supply the committer username. The webhook should return a JSON response that indicates whether the committer...

smarter

Sign CLA on first issue interaction?

2

Is it possible to configure cla-bot to prompt a user to sign the CLA when they first open a new issue or first comment on an existing one? (Background: we're...

larseggert

TBD - see https://finosfoundation.atlassian.net/wiki/spaces/FINOS/pages/75530376/Activation

maoo

## Reinstate linting in package.json when PR 166 and Issue 164 are resolved Due to differences in linting behaviour on local machines vs TravisCI, linting will be disabled when PR...

mcleo-d

Creating a "Silent Mode" for the FINOS CLA Bot

4

FINOS teams are reporting the submission of CLAs prior to the acceptance and merge of contributor pull requests is impacting team velocity. FINOS ODP Story : https://finosfoundation.atlassian.net/browse/ODP-111 This issue proposes...

mcleo-d

Add the ability to whitelist members of an org

6

It would be quite useful if we could whitelist an org. Each commit author would be verified to see if they are a member of a given GitHub org.

ColinEberhardt

Support file/path exclusions

4

It would be great if cla-bot supported configuring what type and/or locations of files to monitor for changes. E.g. if you can specify `*.md` or `/docs/**/*` to exclude particular files...

rikoe