Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add ref input #1

Draft
wants to merge 45 commits into
base: main
Choose a base branch
from
Draft

Add ref input #1

wants to merge 45 commits into from

Commits on Jan 24, 2022

  1. Bump node-fetch from 2.6.1 to 2.6.7 in /runner 

    Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Changelog](https://github.com/node-fetch/node-fetch/blob/main/docs/CHANGELOG.md)
- [Commits](node-fetch/node-fetch@v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jan 24, 2022
    Configuration menu
    Copy the full SHA
    0479586 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2022

  1. Merge branch 'main' into dependabot/npm_and_yarn/runner/node-fetch-2.6.7

    @aeisenberg
    aeisenberg authored Jan 25, 2022
    Configuration menu
    Copy the full SHA
    05981c5 View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2022

  1. Merge branch 'main' into dependabot/npm_and_yarn/runner/node-fetch-2.6.7

    @aeisenberg
    aeisenberg authored Jan 28, 2022
    Configuration menu
    Copy the full SHA
    14b1fec View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2022

  1. Merge pull request github#885 from github/dependabot/npm_and_yarn/run… 

    …ner/node-fetch-2.6.7

Bump node-fetch from 2.6.1 to 2.6.7 in /runner
    @aeisenberg
    aeisenberg authored Jan 29, 2022
    Configuration menu
    Copy the full SHA
    3b831aa View commit details
    Browse the repository at this point in the history

  2. Bump node-fetch from 2.6.1 to 2.6.7 

    Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jan 29, 2022
    Configuration menu
    Copy the full SHA
    bc4366e View commit details
    Browse the repository at this point in the history

  3. Bump trim-off-newlines from 1.0.2 to 1.0.3 

    Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/stevemao/trim-off-newlines/releases)
- [Commits](stevemao/trim-off-newlines@v1.0.2...v1.0.3)

---
updated-dependencies:
- dependency-name: trim-off-newlines
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jan 29, 2022
    Configuration menu
    Copy the full SHA
    253bc84 View commit details
    Browse the repository at this point in the history

  4. Bump sinon from 11.1.2 to 13.0.0 

    Bumps [sinon](https://github.com/sinonjs/sinon) from 11.1.2 to 13.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/docs/changelog.md)
- [Commits](sinonjs/sinon@v11.1.2...v13.0.0)

---
updated-dependencies:
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jan 29, 2022
    Configuration menu
    Copy the full SHA
    9673b56 View commit details
    Browse the repository at this point in the history

  5. Update checked-in dependencies

    github-actions[bot] committed Jan 29, 2022
    Configuration menu
    Copy the full SHA
    c337e5f View commit details
    Browse the repository at this point in the history

  6. Update checked-in dependencies

    github-actions[bot] committed Jan 29, 2022
    Configuration menu
    Copy the full SHA
    8e07ec6 View commit details
    Browse the repository at this point in the history

  7. Update checked-in dependencies

    github-actions[bot] committed Jan 29, 2022
    Configuration menu
    Copy the full SHA
    6410c06 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2022

  1. Merge pull request github#894 from github/dependabot/npm_and_yarn/sin… 

    …on-13.0.0

Bump sinon from 11.1.2 to 13.0.0
    @henrymercer
    henrymercer authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    c260382 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into dependabot/npm_and_yarn/node-fetch-2.6.7

    @henrymercer
    henrymercer authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    1498bce View commit details
    Browse the repository at this point in the history

  3. Merge pull request github#892 from github/dependabot/npm_and_yarn/nod… 

    …e-fetch-2.6.7

Bump node-fetch from 2.6.1 to 2.6.7
    @henrymercer
    henrymercer authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    3a741b6 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'main' into dependabot/npm_and_yarn/trim-off-newlines-1.0.3

    @henrymercer
    henrymercer authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    9664bae View commit details
    Browse the repository at this point in the history

  5. 1.0.31

    github-actions[bot] committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    bbb9c53 View commit details
    Browse the repository at this point in the history

  6. Merge pull request github#893 from github/dependabot/npm_and_yarn/tri… 

    …m-off-newlines-1.0.3

Bump trim-off-newlines from 1.0.2 to 1.0.3
    @henrymercer
    henrymercer authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    ea2ef85 View commit details
    Browse the repository at this point in the history

  7. Merge pull request github#899 from github/update-v1.0.31-3a741b6c 

    Merge main into v1
    @aeisenberg
    aeisenberg authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    1a927e9 View commit details
    Browse the repository at this point in the history

  8. Update changelog and version after v1.0.31

    github-actions[bot] committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    30790fe View commit details
    Browse the repository at this point in the history

  9. 1.0.32

    github-actions[bot] committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    ce6e94b View commit details
    Browse the repository at this point in the history

  10. Merge branch 'main' into mergeback/v1.0.31-to-main-1a927e93

    @aeisenberg
    aeisenberg authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    6677734 View commit details
    Browse the repository at this point in the history

  11. Update checked-in dependencies

    github-actions[bot] committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    a602dbe View commit details
    Browse the repository at this point in the history

  12. Bump long from 4.0.0 to 5.2.0 

    Bumps [long](https://github.com/dcodeIO/long.js) from 4.0.0 to 5.2.0.
- [Release notes](https://github.com/dcodeIO/long.js/releases)
- [Commits](dcodeIO/long.js@4.0.0...v5.2.0)

---
updated-dependencies:
- dependency-name: long
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    ba2b46d View commit details
    Browse the repository at this point in the history

  13. Update checked-in dependencies

    github-actions[bot] committed Jan 31, 2022
    Configuration menu
    Copy the full SHA
    3929310 View commit details
    Browse the repository at this point in the history

  14. Merge pull request github#900 from github/mergeback/v1.0.31-to-main-1… 

    …a927e93

Mergeback v1.0.31 refs/heads/v1 into main
    @aeisenberg
    aeisenberg authored Jan 31, 2022
    Configuration menu
    Copy the full SHA
    e9d5234 View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2022

  1. Add a permissions block for generated workflows 

    Ensure that all workflows are able to write security events.
    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    e9aa2c6 View commit details
    Browse the repository at this point in the history

  2. Adds ref and SHA as inputs, and sarif-id as output

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    980fd4e View commit details
    Browse the repository at this point in the history

  3. Apply documentation suggestions from code review 

    Co-authored-by: Andrew Eisenberg <[email protected]>
    @cw-alexcroteau @aeisenberg
    cw-alexcroteau and aeisenberg committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    0dd4dbf View commit details
    Browse the repository at this point in the history

  4. Applies recomendation in upload-sarif/action.yml

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    5916f98 View commit details
    Browse the repository at this point in the history

  5. Adds check on inputs and compiled files

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    1eaaf07 View commit details
    Browse the repository at this point in the history

  6. Adds integration test and fixes linting

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    1bfa9ac View commit details
    Browse the repository at this point in the history

  7. Fixes integration test

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    260b4d5 View commit details
    Browse the repository at this point in the history

  8. Updates javascript files

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    3cc8799 View commit details
    Browse the repository at this point in the history

  9. Fixes integration tests referred repo

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    63d0c78 View commit details
    Browse the repository at this point in the history

  10. Changes to commit hash in main branch

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    dfe2bc4 View commit details
    Browse the repository at this point in the history

  11. Splits integration tests

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    9f36b75 View commit details
    Browse the repository at this point in the history

  12. Regenerates test workflows

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    72f9a88 View commit details
    Browse the repository at this point in the history

  13. Merge branch 'main' into dependabot/npm_and_yarn/long-5.2.0

    @henrymercer
    henrymercer authored Feb 1, 2022
    Configuration menu
    Copy the full SHA
    ae87410 View commit details
    Browse the repository at this point in the history

  14. Merge pull request github#901 from github/dependabot/npm_and_yarn/lon… 

    …g-5.2.0

Bump long from 4.0.0 to 5.2.0
    @henrymercer
    henrymercer authored Feb 1, 2022
    Configuration menu
    Copy the full SHA
    a9da9fc View commit details
    Browse the repository at this point in the history

  15. Avoid sending status reports in test mode

    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    36419a7 View commit details
    Browse the repository at this point in the history

  16. Merge branch 'aeisenberg/permissions' into add-ref-input

    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    13f97c8 View commit details
    Browse the repository at this point in the history

  17. Update the description of new inputs 

    These new inputs will not work on pull requests from forks.
    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Configuration menu
    Copy the full SHA
    6c6b8c3 View commit details
    Browse the repository at this point in the history

  18. Merge branch 'main' into aeisenberg/permissions

    @aeisenberg
    aeisenberg authored Feb 1, 2022
    Configuration menu
    Copy the full SHA
    941e382 View commit details
    Browse the repository at this point in the history

  19. Merge pull request github#902 from github/aeisenberg/permissions 

    Add a permissions block for generated workflows
    @aeisenberg
    aeisenberg authored Feb 1, 2022
    Configuration menu
    Copy the full SHA
    57f34a1 View commit details
    Browse the repository at this point in the history

  20. Merge pull request #3 from aeisenberg/aeisenberg/add-ref-input 

    Update the description of new inputs
    @cw-alexcroteau
    cw-alexcroteau authored Feb 1, 2022
    Configuration menu
    Copy the full SHA
    9bfa05f View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2022

  1. Merge branch 'main' into add-ref-input

    @cw-alexcroteau
    cw-alexcroteau authored Feb 2, 2022
    Configuration menu
    Copy the full SHA
    1a5b604 View commit details
    Browse the repository at this point in the history