Lee Meador

Dependabot creates PRs with titles that are non-conventional-commit compliant like: ``` Bump some-dependency from 0.79.0 to 0.81.0 ``` I know this is not your responsibility but I would have found...

403 recieved when creating mutex should not be retried

1

Currently: When the token supplied does not have permission to create the mutex thingy in the repo, the call to the github api returns HTTP 403 (forbidden). Then the action...

related PRs is different when writing to a file

1

In this place, where it collects the PRs from the subject line to write to the changelog file, https://github.com/requarks/changelog-action/blob/main/index.js#L36 it will collect the PRS but NOT the rightmost (last) one...

PR comment formatted badly when sarif has two tool entries

2

I run the code to create PR comment like this: ``` npx @security-alert/sarif-to-comment --title "Docker Image Scan Result" --commentUrl "$URL" \ --sarifContentOwner "$OWNER" \ --sarifContentRepo "$REPO" \ ---sarifContentBranch "${{ github.event.pull_request.head.ref...

fix: show multiple missing sha per workflow file

2

Previously only showed one problem per file fixes zgosalvez/github-actions-ensure-sha-pinned-actions#162

Workflow file with multiple uses only shows first failure

1

Using this version: ``` uses: zgosalvez/[email protected] ``` With these lines in among the steps of a workflow in .github/workflows ```yaml steps: - id: files uses: jitterbit/get-changed-files@v1 continue-on-error: true ... more...