7 Commits
Author SHA1 Message Date
pinkforest e9159ac5f7 fix: Docs repo
Continuous integration / main (push) Successful in 2m17s
2023-03-27 22:13:22 +11:00
pinkforest 49cdbfff23 chore: Update dist 2023-03-27 21:47:11 +11:00
pinkforest 27d7cd3d63 fix: Use rest client for reporter 2023-03-27 21:46:22 +11:00
pinkforest bc91a32ed8 chore: Bump to node16 2023-03-27 20:38:01 +11:00
pinkforest(she/her)andDirk Stolle 139ab94e83 chore: Bump deps (#7)
* chore: Dependency bumps

Co-authored-by: Dirk Stolle <striezel-dev@web.de>

* fix stuff

* fix more stuff

* patch lock

* Node 16

---------

Co-authored-by: Dirk Stolle <striezel-dev@web.de>
2023-03-27 20:17:23 +11:00
pinkforest(she/her) 71526086eb Fix CI without token (#6) 2023-03-26 05:09:09 +11:00
Dirk Stolle 6ef0fcd2dd Update readme and changelog for #1 (#3)
Dates for the releases in the changelog are taken from the non-
squashed commits of <https://github.com/rustsec/audit-check/pull/1>.
2023-03-14 03:14:31 +11:00
3 changed files with 2 additions and 36 deletions
+1 -21
View File
@@ -1,6 +1,7 @@
# Rust `audit-check` Action
![MIT licensed](https://img.shields.io/badge/license-MIT-blue.svg)
[![Gitter](https://badges.gitter.im/actions-rs/community.svg)](https://gitter.im/actions-rs/community)
> Security vulnerabilities audit
@@ -43,27 +44,6 @@ Note that informational advisories are not affecting the check status.
![Check screenshot](.github/check_screenshot.png)
#### Granular Permissions
These are the typically used permissions:
```yaml
name: 'rust-audit-check'
github-token:
action-input:
input: token
is-default: false
permissions:
issues: write
issues-reason: to create issues
checks: write
checks-reason: to create check
```
The action does not raise issues when it is not triggered from a "cron" scheduled workflow.
When running the action as scheduled it will crate issues but e.g. in PR / push fails the action.
#### Limitations
Due to [token permissions](https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions),
+1 -1
View File
File diff suppressed because one or more lines are too long
-14
View File
@@ -37,20 +37,6 @@ function makeReport(
});
break;
case 'unsound':
preparedWarnings.push({
advisory: warning.advisory,
package: warning.package,
});
break;
case 'notice':
preparedWarnings.push({
advisory: warning.advisory,
package: warning.package,
});
break;
case 'informational':
preparedWarnings.push({
advisory: warning.advisory,