Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test package deny list 4 #6

Closed
wants to merge 2 commits into from
Closed

Test package deny list 4 #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
62a0f6f
Update pom.xml
AlexWilson-GIS Feb 27, 2024
b159f90
Update dependency-review-config.yml
AlexWilson-GIS Feb 27, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/dependency-review-config.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,9 +65,9 @@ deny_packages:
- 'pkg:maven/org.apache.logging.log4j/[email protected]'
- 'pkg:maven/org.apache.logging.log4j/[email protected]'
# Any number of groups (namespaces in purl format) to block in a PR.
deny_groups:
#deny_groups:
# All log4j v1
- 'pkg:maven/log4j'
#- 'pkg:maven/log4j'
# Enable or disable retrying the action every 10 seconds while waiting for dependency submission actions to complete.
# This will have no effect on GHES until the Dependency Submission API is available.
retry_on_snapshot_warnings: true
Expand All @@ -78,4 +78,4 @@ warn_only: true
# We are not going to run license checks for now.
# We will look into running them later.
# This check doesn't run on GHES anyway due to limitations in the API, so enabling it would only change things in github.com
license_check: false
license_check: false
6 changes: 6 additions & 0 deletions my-app/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,12 @@
</properties>

<dependencies>
<!-- https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core -->
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>2.17.1</version>
</dependency>
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
Expand Down
Loading