Show list of GitHub Security Alerts.
Install with npm:
npm install @security-alert/list-alerts --global
Using with npx:
npx @security-alert/list-alerts
Usage
$ npx @security-alert/list-alerts [option]
Options
--repo Repository to get details for
<owner>/<name>
--token GitHub Token, or support environment variables - GITHUB_TOKEN=xxx
--format json, text
Examples
$ GITHUB_TOKEN=xxx npx @security-alert/list-alerts --repo github/desktop
$ GITHUB_TOKEN=xxx npx @security-alert/list-alerts --repo github/desktop --format json
$ GITHUB_TOKEN="$GITHUB_TOKEN" npx @security-alert/list-alerts --repo security-alert/github-webhook-SecurityVulnerability-test
# lodash
- PackageName: lodash
- PackageUrl: https://www.npmjs.com/package/lodash
- PackageVersion: 2.4.2
- DependenciesType: dependencies
- PackageManifestUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/blob/master/package-lock.json
- VulnerableVersionRange: < 4.17.5
- GitHubAlertUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/network/alert/package-lock.json/lodash/open
# lodash
- PackageName: lodash
- PackageUrl: https://www.npmjs.com/package/lodash
- PackageVersion: 2.4.2
- DependenciesType: dependencies
- PackageManifestUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/blob/master/package-lock.json
- VulnerableVersionRange: < 4.17.11
- GitHubAlertUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/network/alert/package-lock.json/lodash/open
# minimatch
- PackageName: minimatch
- PackageUrl: https://www.npmjs.com/package/minimatch
- PackageVersion: 3.0.0
- DependenciesType: dependencies
- PackageManifestUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/blob/master/package-lock.json
- VulnerableVersionRange: < 3.0.2
- GitHubAlertUrl: https://github.com/security-alert/github-webhook-SecurityVulnerability-test/network/alert/package-lock.json/minimatch/open
...(snip)...
See Releases page.
Install devDependencies and Run npm test
:
npm test
Pull requests and stars are always welcome.
For bugs and feature requests, please create an issue.
- Fork it!
- Create your feature branch:
git checkout -b my-new-feature
- Commit your changes:
git commit -am 'Add some feature'
- Push to the branch:
git push origin my-new-feature
- Submit a pull request :D
MIT © azu