Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dismiss stale reviews when reviewing PRs with vulnerable dependencies #934

Merged
merged 1 commit into from
Sep 13, 2023

Commits on Sep 12, 2023

  1. Dismiss stale reviews when reviewing PRs with vulnerable dependencies

    When the user accepts mediator's suggestions on PRs that container
    vulnerable dependencies, we need to re-review the PR. This patch
    dismisses the earlier review and adds a new one, either just commenting
    that no vulnerable packages were found or listing the remainign
    vulnerabilities.
    
    Also moves the package review code behind an interface that will be used
    later to just add comments and optionally set commit status to prevent
    merge with vulnerable commits.
    
    Fixes: #914
    jhrozek committed Sep 12, 2023
    Configuration menu
    Copy the full SHA
    c19b074 View commit details
    Browse the repository at this point in the history