Support disabling check over devDependencies

[Yash-Singh1]

There should be an option to disable devDependencies because some people just have testing frameworks and build tools in their devDependencies.

[febuiles]

@Yash-Singh1 thanks for your suggestion (and apologies for the delay replying). At the moment our API does not support differentiation between the dependency types, but I'll keep this issue open to see if there's a broader interest in prioritizing support for it.

[rbut-husaim-gte]

Hello @febuiles ,
Another vote that this might be a valuable feature as well.
Thanks.

[joshjohanning]

@febuiles I believe the API supports it now? https://github.blog/changelog/2022-06-23-dependabot-alerts-filter-alerts-by-the-scope-of-the-dependency-runtime-and-development/

Will this be brought as an option to the action?

[febuiles]

Hi @joshjohanning -- Thanks for the heads up! I don't think the Dependency Review API supports this yet, once it does I'll provide a new update!

[courtneycl]

Filter on dependency scope is supported with the v2.2.0.