Skip to content

Issues: actions/dependency-review-action

Beta
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
35 Open 139 Closed
35 Open 139 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Add a Git hook for building JS files enhancement New feature or request Keep Exempt this from stalebot
#249 opened Sep 22, 2022 by febuiles updated Feb 20, 2024
Allow ignoring particular sources of dependencies enhancement New feature or request Keep Exempt this from stalebot
#459 opened Apr 19, 2023 by AlekSi updated Feb 20, 2024
1
Properly handle 502s from Dependency Review API enhancement New feature or request Keep Exempt this from stalebot
#398 opened Feb 8, 2023 by febuiles updated Feb 20, 2024
Handle API errors / rate limits more gracefully bug Something isn't working enhancement New feature or request Keep Exempt this from stalebot
#555 opened Aug 28, 2023 by rajbos updated Feb 20, 2024
Reachability - Add a flag to only block only on reachable dependencies. enhancement New feature or request Keep Exempt this from stalebot
#708 opened Mar 8, 2024 by felickz updated Mar 11, 2024
Improve Snapshots Experience enhancement New feature or request Keep Exempt this from stalebot
#567 opened Sep 14, 2023 by febuiles updated Mar 15, 2024
1 task done
1
"Invalid SPDX License" after upgrading JSTS package Keep Exempt this from stalebot
#575 opened Sep 27, 2023 by mprins updated Mar 22, 2024
@febuiles
4
Add list of resolved vulnerabilities to the PR Comment / Logs enhancement New feature or request
#717 opened Mar 20, 2024 by felickz updated Nov 22, 2024
6
[BUG] mypy 1.12 and 1.13 problems determining license bug Something isn't working
#839 opened Oct 18, 2024 by emlowe updated Dec 4, 2024
2
[BUG] Error "fetch failed" when using proxy bug Something isn't working
#814 opened Aug 16, 2024 by lindeberg updated Dec 11, 2024
5
[BUG] elliptic is reported with an OFL-1.1 license. bug Something isn't working
#862 opened Jan 15, 2025 by BAcanLL updated Jan 15, 2025
Fail on unknown license instead of ignoring it enhancement New feature or request
#857 opened Dec 28, 2024 by mabar updated Jan 17, 2025
3
[BUG] what is the license of json-schema-ref-parser bug Something isn't working
#868 opened Jan 21, 2025 by Loki-Afro updated Jan 22, 2025
Can it work with normal push instead of just pull request? enhancement New feature or request
#826 opened Sep 4, 2024 by umeshnebhani733 updated Jan 24, 2025
3
Support specifying a range of versions in deny-packages enhancement New feature or request
#882 opened Jan 24, 2025 by ellenfieldn updated Jan 24, 2025
[BUG] jinja2 incompatible license bug Something isn't working
#886 opened Jan 27, 2025 by mryzhov updated Jan 27, 2025
1
[BUG] Listing too many allow-dependencies-licenses makes the summary output unreadable bug Something isn't working
#801 opened Jul 23, 2024 by jtomkiew-mng updated Jan 29, 2025
2
[BUG] Using allow-dependencies-licenses still warns as no license found bug Something isn't working
#889 opened Jan 29, 2025 by mbbeaudry-coveo updated Jan 29, 2025
Option to suppress vulnerabilities during dependency check enhancement New feature or request
#890 opened Jan 29, 2025 by duckdeer updated Jan 29, 2025
[BUG] unexpected addition of AND NOASSERTION to license when updating pywin32-ctypes bug Something isn't working
#818 opened Aug 19, 2024 by altendky updated Feb 3, 2025
4
[BUG] DR review unable to find snapshot for head SHA when used in reusable workflow with workflow_call bug Something isn't working
#892 opened Feb 5, 2025 by AppSecCharlie updated Feb 5, 2025
Job Summary Size Limitation aborts the job [BUG] bug Something isn't working Keep Exempt this from stalebot
#786 opened Jun 25, 2024 by Shweta4398 updated Feb 7, 2025
1
@elireisman
14
Print Dependency Changes in PR comment enhancement New feature or request
#813 opened Aug 13, 2024 by wzieba updated Feb 11, 2025
2
[BUG] unable to upload summary: upload aborted, supports content up to a size of 1024k, got 1028k bug Something isn't working
#867 opened Jan 21, 2025 by Loki-Afro updated Mar 20, 2025
1
2
[BUG] Underscores in configuration file don't work whereas dashes do bug Something isn't working
#909 opened Mar 31, 2025 by ChesterEcwid updated Mar 31, 2025
ProTip! Exclude everything labeled bug with -label:bug.