-
Notifications
You must be signed in to change notification settings - Fork 2.1k
feat: Add EPSS to Dependabot alerts #3547
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you, @mdfleury-wbd!
Do you have a link that would give people more information about those new fields and how to interpret them that you could add to the comments?
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #3547 +/- ##
==========================================
- Coverage 91.29% 91.23% -0.07%
==========================================
Files 184 183 -1
Lines 16169 16053 -116
==========================================
- Hits 14762 14646 -116
Misses 1231 1231
Partials 176 176 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
I do https://github.blog/changelog/2024-10-10-epss-scores-in-the-github-advisory-database/ Any preference as to where in the comments? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How about something like this?
Co-authored-by: Glenn Lewis <6598971+gmlewis@users.noreply.github.com>
Co-authored-by: Glenn Lewis <6598971+gmlewis@users.noreply.github.com>
Please run |
Oh, sorry, it looks like a test needs updating (remove the two |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you, @mdfleury-wbd!
LGTM.
Merging.
(It looks like Codecov is currently having problems which is causing the tests to fail, but I pulled this PR locally and tested it and it all looks good, so merging anyway.)
Adding new field with EPSS information to Dependabot alerts