Skip to content

Issues: actions/dependency-review-action

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
37 Open 130 Closed
37 Open 130 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Support for packages with multiple licenses enhancement New feature or request Keep Exempt this from stalebot
#263 opened Sep 29, 2022 by jcasner
@febuiles
20 👍 15
Job Summary Size Limitation aborts the job [BUG] bug Something isn't working Keep Exempt this from stalebot
#786 opened Jun 25, 2024 by Shweta4398
1
@elireisman
14 👍 9
Add list of resolved vulnerabilities to the PR Comment / Logs enhancement New feature or request
#717 opened Mar 20, 2024 by felickz
6 👍 7
Properly handle 502s from Dependency Review API enhancement New feature or request Keep Exempt this from stalebot
#398 opened Feb 8, 2023 by febuiles
👍 6
Failure to determine license and flag to explicitly deny unknown licenses enhancement New feature or request
#672 opened Jan 26, 2024 by wmmc88
8 👍 3
[BUG] what is the license of json-schema-ref-parser bug Something isn't working
#868 opened Jan 21, 2025 by Loki-Afro
👍 2
Add option for commit status check enhancement New feature or request Stale
#825 opened Aug 30, 2024 by ebickle
1 👍 2
Reachability - Add a flag to only block only on reachable dependencies. enhancement New feature or request Keep Exempt this from stalebot
#708 opened Mar 8, 2024 by felickz
👍 1
[BUG] Listing too many allow-dependencies-licenses makes the summary output unreadable bug Something isn't working
#801 opened Jul 23, 2024 by jtomkiew-mng
2 👍 1
[BUG] Error "fetch failed" when using proxy bug Something isn't working
#814 opened Aug 16, 2024 by lindeberg
5 👍 1
[BUG] jinja2 incompatible license bug Something isn't working
#886 opened Jan 27, 2025 by mryzhov
1 👍 1
[BUG] unable to upload summary: upload aborted, supports content up to a size of 1024k, got 1028k bug Something isn't working
#867 opened Jan 21, 2025 by Loki-Afro
1 👍 1
[BUG] action does fail with valid licenses like Unicode-3.0 bug Something isn't working
#854 opened Dec 6, 2024 by ailox
1
1 👍 1
Packages being flagged incorrectly with invalid SPDX license definitions bug Something isn't working
#809 opened Aug 9, 2024 by shubhashish-certa
7
[BUG] allow-dependencies-licenses not respected after changing from == to >= with Python bug Something isn't working
#812 opened Aug 12, 2024 by altendky
[BUG] validity could not be determined for (MIT OR Apache-2.0) AND Unicode-3.0 bug Something isn't working
#897 opened Feb 20, 2025 by altendky
4
"Invalid SPDX License" after upgrading JSTS package Keep Exempt this from stalebot
#575 opened Sep 27, 2023 by mprins
@febuiles
4
[BUG] Dependency Review gets stuck if forked . bug Something isn't working Stale
#820 opened Aug 22, 2024 by Shweta4398
2
Show patched version of dependency in the dependency review summary enhancement New feature or request Stale
#823 opened Aug 26, 2024 by virangdoshi
2
[BUG] warn-only set and job fails when having a vulnerability bug Something isn't working Stale
#824 opened Aug 28, 2024 by dolorsfg
1
Improve Snapshots Experience enhancement New feature or request Keep Exempt this from stalebot
#567 opened Sep 14, 2023 by febuiles
1 task done
1
Handle API errors / rate limits more gracefully bug Something isn't working enhancement New feature or request Keep Exempt this from stalebot
#555 opened Aug 28, 2023 by rajbos
[BUG] Dependency Review reports the Vulnerability which we are updating. bug Something isn't working
#830 opened Sep 22, 2024 by Shweta4398
Different configuration per package type? enhancement New feature or request
#834 opened Oct 1, 2024 by steve-gore-snapdocs
Allow ignoring particular sources of dependencies enhancement New feature or request Keep Exempt this from stalebot
#459 opened Apr 19, 2023 by AlekSi
1
ProTip! Find all open issues with in progress development work with linked:pr.