diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index b7c5bab..be81fa9 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -30,7 +30,14 @@ jobs: - name: 'Checkout repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v4 + #uses: actions/dependency-review-action@v4 + # Test 2 - attempt to fix bug with N/A shown + # Test 3 - build the dist folder - better debug output + # Test 3.1 - No snapshots were found for the head SHA 30134881ae6e9e0c6f8c01581b8cf6bbbb957b3f. + # Test 4 - merge in recent changes + # Test 5 - show true/false testing + #uses: forks-felickz/dependency-review-action@copilot/add-patched-versions-column + uses: actions/dependency-review-action@aa60746a920d63ce55376f67d381e15edd3a714d #aka forks-felickz:main # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options. with: comment-summary-in-pr: always @@ -38,4 +45,7 @@ jobs: # deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later retry-on-snapshot-warnings: true #wait for snapshots to upload from the auto-submission workflow! retry-on-snapshot-warnings-timeout: 120 + show-patched-versions: false + #show-patched-versions: true + diff --git a/Directory.Packages.props b/Directory.Packages.props index 434d2f7..efc27f3 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -3,30 +3,37 @@ true true - - - - - - + + + + + + + + - - + + + + - - + + - - - + + + + - - + + + + diff --git a/VulnerableLibrary/VulnerableLibrary.csproj b/VulnerableLibrary/VulnerableLibrary.csproj index b2817c3..52125a1 100644 --- a/VulnerableLibrary/VulnerableLibrary.csproj +++ b/VulnerableLibrary/VulnerableLibrary.csproj @@ -1,4 +1,4 @@ - + net9.0 @@ -10,7 +10,10 @@ + + +