jpoehnelt / secrets-sync-action

A Github Action that can sync secrets from one repository to many others.
https://github.com/marketplace/actions/secrets-sync-action
Apache License 2.0
314 stars 93 forks source link

Update packages to fix 5000 (!) vulnerabilities #45

Closed Plabick closed 3 years ago

Plabick commented 3 years ago

The npm audit tool found 5986 vulnerabilities (3012 low, 79 moderate, 2895 high) in this project. I ran the npm audit fix tool which resolved 5895 of them. No other changes were made.

google-cla[bot] commented 3 years ago

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project (if not, look below for help). Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

:memo: Please visit https://cla.developers.google.com/ to sign.

Once you've signed (or fixed any issues), please reply here with @googlebot I signed it! and we'll verify it.


What to do if you already signed the CLA

Individual signers
Corporate signers

ℹ️ Googlers: Go here for more info.

Plabick commented 3 years ago

@googlebot I signed it!

codecov-commenter commented 3 years ago

Codecov Report

Merging #45 (d92f27f) into master (243f815) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master      #45   +/-   ##
=======================================
  Coverage   98.03%   98.03%           
=======================================
  Files           6        6           
  Lines         102      102           
  Branches       10       10           
=======================================
  Hits          100      100           
  Misses          2        2           

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 243f815...d92f27f. Read the comment docs.

github-actions[bot] commented 3 years ago

:tada: This PR is included in version 1.4.3 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: