luciano/amazon-kinesis-client
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added dependabot checker, fixed cvss check logic

Browse source
This commit is contained in:
skye rogers 2025-03-27 09:56:52 -07:00
parent aafc36deaf
commit 6b541e4ebc
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
.github/workflows/maven.yml vendored
View file

@ -16,7 +16,7 @@ permissions:
jobs:
dependabot:
runs-on: ubuntu-latest
# if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo'
if: github.event.pull_request.user.login == 'dependabot[bot]'
steps:
- name: Dependabot metadata
id: metadata
@ -25,8 +25,7 @@ jobs:
alert-lookup: true
github-token: "${{ secrets.GITHUB_TOKEN }}"
- name: Enable auto-merge for Dependabot PRs
# if: steps.metadata.outputs.update-type != 'version-update:semver-major' && cvss level > 0
if: steps.metadata.outputs.update-type != 'version-update:semver-major' && steps.dependabot-metadata.outputs.cvss < 0.1
if: steps.metadata.outputs.update-type != 'version-update:semver-major' && steps.dependabot-metadata.outputs.cvss > 0
run: gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}