search

olympus-fergus / dvpwa

Damn Vulnerable Python Web App
MIT License
0 stars 1 forks source link

Bump codacy/codacy-analysis-cli-action from 1.1.0 to 4.0.1 #39

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps codacy/codacy-analysis-cli-action from 1.1.0 to 4.0.1.

Release notes

Sourced from codacy/codacy-analysis-cli-action's releases.

Skip Uncommitted Changes

It's now possible to skip uncommitted changes using the flag --skip-uncommitted-files-check

Parallel mode runs now tools in parallel

Parallel mode was not working as intended. Now it spawns multiple Docker instances based on the parallelism level

Fix using the correct commit SHA on pull requests

Actions triggered on pull requests now send the reports for the correct commit SHA

Fix staticcheck flow that could change go.mod files

No release notes provided.

Fix standalone tools

Fixes scenario where gosec does not run leading to failure in the next standalone tools.

Add support for account API tokens

No release notes provided.

Fix SARIF output for tools that returns 0 startLine

No release notes provided.

Bump CLI version used in action

  • Bump to CLI version to 5.1.4.
  • Now, when exporting issues to SARIF it no longer downgrades issues' severities for security patterns.
Commits
  • 29e74c9 Merge pull request #71 from codacy/fix-readme-typos
  • 966ddf8 Update action.yml
  • 028de6e Merge pull request #70 from codacy/add-skip-uncommitted-files-check
  • 4d04001 Update action.yml
  • 6474ca1 Update action.yml
  • 9f09141 Merge pull request #65 from codacy/bump-cli-version
  • b831d86 bump: Update cli version
  • 0de7704 Merge pull request #63 from codacy/bump-cli-to-7.0.0
  • c546f3f bump: Bump codacy-analysis-cli to 7.0.0
  • b3451bc Merge pull request #60 from codacy/fix/use-correct-commit-sha
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #40.