Commit Graph

  • b7fae940e9 Add renovate.json renovate/configure Renovate Bot 2025-12-29 20:02:28 +00:00
  • 66a6ee35b1 build(deps): bump github/codeql-action in the actions group (#85) main dependabot[bot] 2025-12-22 13:02:26 -05:00
  • 7fa452fb4b build(deps): bump the actions group with 2 updates (#84) dependabot[bot] 2025-12-15 14:10:55 -08:00
  • 9970334372 build(deps): bump the actions group with 3 updates (#83) dependabot[bot] 2025-12-09 08:40:22 -08:00
  • 98cf6988a1 build(deps): bump the actions group with 2 updates (#82) dependabot[bot] 2025-12-01 17:21:24 -05:00
  • 8e7c7748a9 build(deps): bump the actions group with 3 updates (#81) dependabot[bot] 2025-11-24 16:12:11 -05:00
  • 2ffb2343b3 feat: support --locked flag (#79) sabonerune 2025-11-18 12:58:11 +09:00
  • f0318e8b9e build(deps): bump the actions group with 3 updates (#80) dependabot[bot] 2025-11-17 13:14:56 -05:00
  • d10ebbb9e0 build(deps): bump github/codeql-action in the actions group (#77) dependabot[bot] 2025-11-03 14:13:44 -05:00
  • 34ad292862 build(deps): bump the actions group with 2 updates (#76) dependabot[bot] 2025-10-27 14:20:31 -04:00
  • e93921ea5a build(deps): bump the actions group with 2 updates (#75) dependabot[bot] 2025-10-20 14:14:33 -04:00
  • f1c3022531 build(deps): bump the actions group with 2 updates (#74) dependabot[bot] 2025-10-06 13:40:39 -04:00
  • de8855bb5b build(deps): bump github/codeql-action from 3.30.3 to 3.30.5 in the actions group (#73) dependabot[bot] 2025-09-29 23:21:18 +00:00
  • bfbcd5f00a build(deps): bump the actions group with 2 updates (#72) dependabot[bot] 2025-09-15 13:56:27 -04:00
  • 41edf6f055 build(deps): bump the actions group with 2 updates (#71) dependabot[bot] 2025-09-09 17:18:02 -04:00
  • b3978f6f12 build(deps): bump the actions group with 2 updates (#70) dependabot[bot] 2025-09-02 09:27:59 -04:00
  • da98638f18 build(deps): bump the actions group with 2 updates (#69) dependabot[bot] 2025-08-26 15:11:00 -04:00
  • e2eb0a2b6b build(deps): bump the actions group with 3 updates (#68) dependabot[bot] 2025-08-19 08:12:42 -04:00
  • 02a0ac8d1d build(deps): bump github/codeql-action in the actions group (#67) dependabot[bot] 2025-08-04 22:00:58 -04:00
  • 648d9a1458 build(deps): bump the actions group with 2 updates (#66) dependabot[bot] 2025-07-28 16:20:37 -04:00
  • cbfb60b762 build(deps): bump the actions group with 2 updates (#65) dependabot[bot] 2025-07-21 18:42:11 -04:00
  • 834dac3117 build(deps): bump the actions group with 2 updates (#64) dependabot[bot] 2025-06-30 19:49:18 -06:00
  • b0e7c507ca build(deps): bump astral-sh/setup-uv in the actions group (#63) dependabot[bot] 2025-06-23 15:34:33 -06:00
  • 31eb18f0de build(deps): bump github/codeql-action in the actions group (#62) dependabot[bot] 2025-06-16 15:25:49 -04:00
  • 7714fcb0ce build(deps): bump github/codeql-action in the actions group (#61) dependabot[bot] 2025-06-09 14:35:39 -04:00
  • 52b2e35e0c build(deps): bump astral-sh/setup-uv in the actions group (#60) dependabot[bot] 2025-05-26 17:21:20 -04:00
  • 6833440696 build(deps): bump github/codeql-action in the actions group (#59) dependabot[bot] 2025-05-19 14:10:25 -04:00
  • 96dc0a401e build(deps): bump the actions group with 2 updates (#58) dependabot[bot] 2025-05-05 14:28:39 -04:00
  • 68a61d77e9 chore(ci): fix minor zizmor permissions findings (#57) William Woodruff 2025-04-28 16:13:38 -04:00
  • 0b37897812 build(deps): bump astral-sh/setup-uv from 5 to 6 in the actions group (#56) dependabot[bot] 2025-04-28 16:05:31 -04:00
  • 82ecb5449d Merge pull request #54 from pypa/ww/zizmor Dustin Ingram 2025-01-06 17:18:23 -05:00
  • ca6166b637 ci: zizmor fixes, add zizmor workflow William Woodruff 2025-01-06 15:43:51 -05:00
  • fee84f2320 Add support for --disable-pip (#53) davidemonkeys 2024-12-12 15:41:14 +01:00
  • 49949764d3 build(deps): bump actions/setup-python from 4 to 5 in the actions group (#52) dependabot[bot] 2024-11-12 12:27:51 -07:00
  • 63a52c0a3a chore: configure dependabot (#50) Piotr Idzik 2024-11-12 20:23:10 +01:00
  • 218578ea1c docs: encourage users to use setup-python@v5 (#51) Piotr Idzik 2024-11-12 15:43:10 +01:00
  • db23b68152 chore: update actions/checkout to v4 (#49) Piotr Idzik 2024-11-11 23:55:49 +01:00
  • 1220774d90 README: prep 1.1.0 (#48) v1.1.0 William Woodruff 2024-08-08 14:55:13 -04:00
  • 8c34e8a682 selftest: run some selftests on Windows (#44) William Woodruff 2024-08-08 14:51:38 -04:00
  • 530374b67a Support running inside windows self-hosted runner (#43) AngelMF 2023-10-30 15:04:30 -07:00
  • d499194be7 README: prep 1.0.8 v1.0.8 William Woodruff 2023-05-23 15:17:01 -04:00
  • cf52d21d83 Remove pin on requests (fixes #41) (#42) Alexerson 2023-05-23 12:15:36 -07:00
  • 3ac8fed01c README: prep 1.0.7 (#40) v1.0.7 William Woodruff 2023-05-03 15:51:58 -04:00
  • f7e969538f requirements: constrain requests below 2.30 (#39) William Woodruff 2023-05-03 15:45:49 -04:00
  • 28aa5e1be6 New issue templates (#37) Andrew Pan 2023-03-28 18:44:20 -05:00
  • 1abec09c8d action: replace internal-be-careful-debug (#36) Andrew Pan 2023-03-23 17:52:22 -05:00
  • 75edeacda5 README: prep 1.0.6 (#34) v1.0.6 William Woodruff 2023-02-16 15:04:51 -05:00
  • 666b1b8831 Check that output file exists before opening (#33) Andrew Pan 2023-02-16 13:59:38 -06:00
  • 9075e938de README: prep 1.0.5 v1.0.5 William Woodruff 2023-01-10 13:42:15 -05:00
  • 0007f08635 requirements: pip-audit >= 2.4.13 William Woodruff 2023-01-10 13:37:38 -05:00
  • c5b051c6b3 requirements: relax pip-audit version constraint William Woodruff 2023-01-10 13:27:54 -05:00
  • e187a7bf0b README: prep 1.0.4 v1.0.4 William Woodruff 2022-12-29 11:42:58 -05:00
  • b0690898d5 requirements: pip-audit==2.4.12 William Woodruff 2022-12-29 11:42:19 -05:00
  • 454d956b51 README: prep for 1.0.3 v1.0.3 William Woodruff 2022-12-28 10:30:30 -05:00
  • e02369acd1 requirements: pip-audit==2.4.11 William Woodruff 2022-12-28 10:29:45 -05:00
  • 1d4b225904 README: prep for v1.0.2 v1.0.2 William Woodruff 2022-12-07 22:05:45 -05:00
  • d634a13a33 requirements: pip-audit==2.4.8 William Woodruff 2022-12-07 22:04:32 -05:00
  • 5e29e47492 README: prep for v1.0.1 v1.0.1 William Woodruff 2022-11-03 14:51:34 -04:00
  • 5ed8d3149c action: remove deprecated use of set-output (#29) William Woodruff 2022-11-03 14:50:40 -04:00
  • 2e332741f5 Add FAQ entry for pipenv support (#28) Adam Meily 2022-09-06 14:03:00 -04:00
  • fc80c9a7d2 requirements: pip-audit 2.4.4 (#27) William Woodruff 2022-09-01 12:00:09 -04:00
  • ac6a629be3 README: update slugs from trailofbits to pypa (#26) William Woodruff 2022-09-01 10:22:47 -04:00
  • 2d48142e41 action.py: Remove unused line (#25) Dustin Ingram 2022-08-10 14:43:19 -04:00
  • 6257a8afdd Add Semgrep CI semgrep.dev on behalf of @woodruffw 2022-08-09 19:24:28 +00:00
  • 4a89a38104 action, templates: switch to a template (#24) William Woodruff 2022-08-03 10:11:39 -04:00
  • cce88443a7 README: prep for 1.0.0 v1.0.0 William Woodruff 2022-07-25 13:25:25 -04:00
  • 04c269efdc requirements: 2.4.3 William Woodruff 2022-07-25 13:23:36 -04:00
  • f22fd11c6a README: prep for 0.0.6 v0.0.6 William Woodruff 2022-07-21 10:46:14 -04:00
  • e5e5bb4943 requirements: pip-audit 2.4.2 (#22) William Woodruff 2022-07-21 10:45:00 -04:00
  • e75f4e6b21 README: typo William Woodruff 2022-07-12 11:12:23 -04:00
  • 6b7dc40731 README: prep for 0.0.5 v0.0.5 William Woodruff 2022-06-30 14:45:34 -04:00
  • 39d1d0727f Use Markdown-formatted tables in the step summary (#19) William Woodruff 2022-06-30 14:44:23 -04:00
  • ad890dc94a Support ignoring vulnerabilities (#18) William Woodruff 2022-06-28 10:02:23 -04:00
  • 252231c091 action, README: add settings for custom/extra indexes (#16) William Woodruff 2022-06-27 11:24:13 -04:00
  • d88c6e2ef7 action.yml, setup: factor out setup, refactor action (#15) William Woodruff 2022-06-17 17:31:58 -04:00
  • 6bfc6a0ebf action.py: use ::error (#14) William Woodruff 2022-06-16 15:24:20 -04:00
  • a354d479d8 README: rewrite URLs to 0.0.4 v0.0.4 William Woodruff 2022-06-16 14:42:47 -04:00
  • 82a7566979 action.yml: use github.action_path to locate the reqs (#12) William Woodruff 2022-06-16 14:42:24 -04:00
  • 4aa57b6d51 README: rewrite URLs to 0.0.3 v0.0.3 William Woodruff 2022-06-16 14:36:34 -04:00
  • a84a2d863a Refactor into a composite action (#9) William Woodruff 2022-06-16 14:35:53 -04:00
  • 71fea02bf0 README: bump action tags William Woodruff 2022-06-14 15:36:57 -04:00
  • 7b1116f29a action.py: set PIP_NO_CACHE_DIR during pip-audit (#7) v0.0.2 William Woodruff 2022-06-14 15:32:37 -04:00
  • 1395474b44 README: re-tag actions v0.0.1 William Woodruff 2022-06-14 14:53:27 -04:00
  • a77cddb24b README: syntax highlighting William Woodruff 2022-06-14 14:49:18 -04:00
  • 16b0b9e010 README: CI badges William Woodruff 2022-06-14 12:48:32 -04:00
  • a260f8fa82 CI: add a linting job (#6) William Woodruff 2022-06-14 12:45:06 -04:00
  • 3f715d2fe4 action.py: unify logging (#5) William Woodruff 2022-06-14 12:27:54 -04:00
  • 33278f020f action: fix environment William Woodruff 2022-06-14 11:49:30 -04:00
  • 930d9ed953 README: document usage and settings William Woodruff 2022-06-14 11:47:36 -04:00
  • 06088c5cf1 selftest: allow failure William Woodruff 2022-06-14 11:47:30 -04:00
  • 8b056eba0c action: allow failure William Woodruff 2022-06-14 11:47:18 -04:00
  • 22f8c090e0 selftest: return to a non-vulnerable selftest William Woodruff 2022-06-14 11:13:54 -04:00
  • a385281f20 action.py: import cleanup William Woodruff 2022-06-14 11:13:24 -04:00
  • 206ab24f29 action.py: make it exit with the right status William Woodruff 2022-06-14 11:10:25 -04:00
  • 8e79f6fd9f Merge pull request #1 from trailofbits/ww/ci William Woodruff 2022-06-14 11:09:46 -04:00
  • d6e7f690e2 action.py: hackety hack William Woodruff 2022-06-14 11:05:05 -04:00
  • 80bc5ec706 action.py: fix formatting, maybe William Woodruff 2022-06-14 11:00:04 -04:00
  • 8d4d6861ed action.py: code block, for now William Woodruff 2022-06-14 10:57:08 -04:00
  • 81c3d0edf1 action.py: re-add manual cache William Woodruff 2022-06-14 10:45:03 -04:00
  • 577f869e78 treewide: test file, summary, etc William Woodruff 2022-06-14 10:42:07 -04:00