Scan the result of merge instead of diff #922
Labels
enhancement
New feature or request
Comments
Wovchena
added a commit
to Wovchena/openvino.genai-public
that referenced
this issue
Apr 25, 2025
The reason we dont see the error about this license is that they scan diff instead of repo state: actions/dependency-review-action#922. MIT-CMU was my attempt to please it, but it seems that the reviewer uses .github/dependency_review.yml from the target branch only which is another their issue. The license in this commit feels to be more correct because it is the license printed in the error message https://github.com/openvinotoolkit/openvino.genai/actions/runs/14531018031/job/40770651373
github-merge-queue bot
pushed a commit
to openvinotoolkit/openvino.genai
that referenced
this issue
Apr 25, 2025
The reason we dont see the error about this license is that they scan diff instead of repo state: actions/dependency-review-action#922. MIT-CMU was my attempt to please it, but it seems that the reviewer uses .github/dependency_review.yml from the target branch only which is another their issue. The license in this commit feels to be more correct because it is the license printed in the error message https://github.com/openvinotoolkit/openvino.genai/actions/runs/14531018031/job/40770651373
apram0d
pushed a commit
to apram0d/openvino.genai
that referenced
this issue
Apr 28, 2025
The reason we dont see the error about this license is that they scan diff instead of repo state: actions/dependency-review-action#922. MIT-CMU was my attempt to please it, but it seems that the reviewer uses .github/dependency_review.yml from the target branch only which is another their issue. The license in this commit feels to be more correct because it is the license printed in the error message https://github.com/openvinotoolkit/openvino.genai/actions/runs/14531018031/job/40770651373
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Is your feature request related to a problem? Please describe.
When a dependency is added and
dependency-review-actionis enabled after, the dependency isn't scanned.Describe the solution you'd like
dependency-review-actionshould scan the result of PR merge by default.The text was updated successfully, but these errors were encountered: