Jon Janego comments

Results 36 comments of


                                            Jon Janego

Sarif output

Thanks @ben-wilson-peak . Agree that there's some usability improvements we could do with the dependency review action to more actionable and contextual to the workflow run. We'll take this into...

Failure to determine license and flag to explicitly deny unknown licenses

https://github.com/actions/dependency-review-action/issues/714 also suggests the value of failing on unknown.

Failure to determine license and flag to explicitly deny unknown licenses

@sreya we'd definitely take a look at it!

Failure to determine license and flag to explicitly deny unknown licenses

> [@jonjanego](https://github.com/jonjanego) is this going to be added? at the moment we do not have bandwidth to add this new feature, but would love to review any community contributions to...

Add a field for dependency resolution errors

Thank you for the feedback @sschuberth !

Unecessary annotations to GitHub Actions summary runs

Thanks for the feedback @caquino

`warn_only` Does Not Apply When Using a Deny List

Hi @AlexWilson-GIS thank you for the suggestion. It's an interesting suggested workaround to what seems like the bigger issue to focus on, what you said of packages being misidentified. When...

Job Summary Size Limitation aborts the job [BUG]

Hi folks, Jon from GitHub here. Thanks for filing this issue originally @Shweta4398 and others for commenting on it. What's happening here is that the action summary buffer is exceeding...

MIT is an invalid SPDX license identifier?

Could you please share the full deny list, as well as the dependency that it's failing on?

Add outputs for the changes data

Thank you @laughedelic ! I like the idea, but agree with @febuiles that we'd like to see some more examples and documentation. I assume these are all optional parameters, and...