phylum-dev/phylum-ci issues and pull requests

#418 - build: bump actions/checkout from 4.1.3 to 4.1.4

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, github_actions

#417 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 10 months ago - 1 comment

#416 - build: bump actions/upload-artifact from 4.3.1 to 4.3.2

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, github_actions

#415 - build: bump actions/checkout from 4.1.1 to 4.1.3

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago
Labels: dependencies, github_actions

#414 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 10 months ago - 1 comment

#413 - build: bump rich from 12.6.0 to 13.7.1

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 3 comments
Labels: dependencies, python

#412 - build: bump idna from 3.6 to 3.7

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, python

#411 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 10 months ago - 2 comments

#410 - build: bump rich from 12.6.0 to 13.7.1

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 2 comments
Labels: dependencies, python

#409 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 11 months ago - 1 comment

#408 - build: bump actions/setup-python from 5.0.0 to 5.1.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies, github_actions

#407 - docs: recommend triggering scans for default branch

Pull Request - State: closed - Opened by maxrake 11 months ago - 3 comments

#406 - feat: ensure Bitbucket repo URLs use HTTPS scheme

Pull Request - State: closed - Opened by maxrake 11 months ago

#405 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 11 months ago - 1 comment

#404 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 11 months ago - 1 comment

#403 - build: bump actions/checkout from 4.1.1 to 4.1.2

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, github_actions

#402 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 11 months ago - 1 comment

#401 - build: bump packaging from 23.2 to 24.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, python

#400 - feat: implement audit mode

Pull Request - State: closed - Opened by maxrake 11 months ago

#399 - ci: add documentation update trigger to release workflow

Pull Request - State: closed - Opened by maxrake 11 months ago

#398 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 12 months ago - 1 comment

#397 - fix: `pre-commit` hook failures

Pull Request - State: closed - Opened by maxrake 12 months ago - 1 comment

#397 - fix: `pre-commit` hook failures

Pull Request - State: closed - Opened by maxrake 12 months ago - 1 comment

#396 - Implement audit mode

Issue - State: open - Opened by maxrake 12 months ago
Labels: enhancement, medium priority

#396 - Implement audit mode

Issue - State: closed - Opened by maxrake 12 months ago
Labels: enhancement, medium priority

#395 - docs: restore integration documentation

Pull Request - State: closed - Opened by maxrake 12 months ago - 1 comment

#394 - `pre-commit` hook failures when adding worktree

Issue - State: closed - Opened by maxrake 12 months ago - 1 comment
Labels: bug, needs triage

#393 - build: update `poetry` to latest version

Pull Request - State: closed - Opened by maxrake 12 months ago - 1 comment

#392 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 12 months ago - 1 comment

#391 - fix: image failures for non-root uses of `yarn` and `pnpm`

Pull Request - State: closed - Opened by maxrake 12 months ago

#390 - build: bump cryptography from 42.0.3 to 42.0.4

Pull Request - State: closed - Opened by dependabot[bot] 12 months ago - 3 comments
Labels: dependencies, python

#389 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot 12 months ago - 1 comment

#388 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#387 - build: bump actions/upload-artifact from 4.3.0 to 4.3.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#387 - build: bump actions/upload-artifact from 4.3.0 to 4.3.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#386 - build: migrate from Python Semantic Release v7

Pull Request - State: closed - Opened by maxrake about 1 year ago - 1 comment

#385 - perf: reduce `phylum` binary size for slim images

Pull Request - State: closed - Opened by maxrake about 1 year ago - 4 comments

#384 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#384 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: open - Opened by phylum-bot about 1 year ago - 1 comment

#383 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#382 - build: bump actions/upload-artifact from 4.2.0 to 4.3.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, github_actions

#381 - build: bump rich from 12.6.0 to 13.7.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 2 comments
Labels: dependencies, python

#380 - build: bump cryptography from 41.0.7 to 42.0.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 2 comments
Labels: dependencies, python

#379 - build: bump pytest from 7.4.4 to 8.0.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 2 comments
Labels: dependencies, python

#378 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#377 - build: bump actions/upload-artifact from 4.1.0 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#376 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#375 - build: bump actions/upload-artifact from 4.0.0 to 4.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#374 - chore: update for the ruff v0.1.12 and v0.1.13 releases

Pull Request - State: closed - Opened by maxrake about 1 year ago

#373 - build: bump gitpython from 3.1.40 to 3.1.41

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, python

#372 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#371 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#370 - docs: update documentation links

Pull Request - State: closed - Opened by maxrake about 1 year ago

#369 - build: bump crazy-max/ghaction-import-gpg from 6.0.0 to 6.1.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies, github_actions

#368 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#367 - build: bump actions/upload-artifact from 3.1.3 to 4.0.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#366 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#365 - build: bump actions/setup-python from 4.7.1 to 5.0.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 2 comments
Labels: dependencies, github_actions

#364 - chore!: account for breaking Phylum CLI changes

Pull Request - State: closed - Opened by maxrake about 1 year ago

#363 - Account for breaking Phylum CLI changes

Issue - State: closed - Opened by maxrake about 1 year ago
Labels: needs triage, task

#362 - refactor: trim log messages and remove walrus operators

Pull Request - State: closed - Opened by maxrake about 1 year ago

#361 - fix: repository URL sometimes formatted with `False`

Pull Request - State: closed - Opened by maxrake about 1 year ago

#360 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#359 - feat: parse current dependencies only once

Pull Request - State: closed - Opened by maxrake about 1 year ago

#358 - build: bump cryptography from 41.0.5 to 41.0.6

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, python

#357 - Drop Python 3.9 support

Issue - State: closed - Opened by maxrake about 1 year ago
Labels: low priority, task

#356 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 1 comment

#355 - feat: set repository URL for CI environments

Pull Request - State: closed - Opened by maxrake about 1 year ago

#354 - build: update `poetry` to latest version

Pull Request - State: closed - Opened by maxrake about 1 year ago - 1 comment

#353 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot about 1 year ago - 2 comments

#352 - build: bump actions/github-script from 6.4.1 to 7.0.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago - 1 comment
Labels: dependencies, github_actions

#351 - feat: ensure remote `HEAD` set for `CINone` implementation

Pull Request - State: closed - Opened by maxrake about 1 year ago - 1 comment

#350 - chore: Update CODEOWNERS

Pull Request - State: closed - Opened by kylewillmon about 1 year ago

#349 - Set repository URL when running `phylum-ci`

Issue - State: closed - Opened by maxrake over 1 year ago
Labels: enhancement, needs triage

#348 - Add `refurb` back to QA checks

Issue - State: closed - Opened by maxrake over 1 year ago - 1 comment
Labels: task

#347 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 2 comments

#346 - build: update `poetry` to latest version

Pull Request - State: closed - Opened by maxrake over 1 year ago - 1 comment

#345 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 1 comment

#344 - feat!: support workspace projects for all lockfile types

Pull Request - State: closed - Opened by maxrake over 1 year ago

#343 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 2 comments

#342 - feat: cache parsing results of current dependency files

Pull Request - State: closed - Opened by maxrake over 1 year ago

#341 - feat: extend GHA integration to support `pull_request_target` events

Pull Request - State: closed - Opened by maxrake over 1 year ago

#340 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 1 comment

#339 - build: bump actions/checkout from 4.1.0 to 4.1.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, github_actions

#338 - chore: update for the ruff v0.1.1 release

Pull Request - State: closed - Opened by maxrake over 1 year ago

#337 - fix: more container tools broken when home-less

Pull Request - State: closed - Opened by maxrake over 1 year ago

#336 - feat: enforce strict engine control for `npm`

Pull Request - State: closed - Opened by maxrake over 1 year ago

#335 - feat!: add Python 3.12 support and drop Python 3.8 support

Pull Request - State: closed - Opened by maxrake over 1 year ago - 1 comment

#334 - build: bump urllib3 from 2.0.6 to 2.0.7

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies, python

#333 - Support workspace projects for all lockfile types

Issue - State: closed - Opened by maxrake over 1 year ago
Labels: enhancement, needs triage

#332 - Extend GHA integration to support `push` events

Issue - State: open - Opened by maxrake over 1 year ago - 2 comments
Labels: enhancement, wontfix

#331 - Extend GHA integration to support `pull_request_target` events

Issue - State: closed - Opened by maxrake over 1 year ago - 4 comments
Labels: enhancement, needs triage

#330 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 1 comment

#329 - fix: container tools broken when home-less

Pull Request - State: closed - Opened by maxrake over 1 year ago

#328 - docs: add more detail for manifest file support

Pull Request - State: closed - Opened by maxrake over 1 year ago

#327 - build: bump `poetry.lock` dependencies and `pre-commit` hooks

Pull Request - State: closed - Opened by phylum-bot over 1 year ago - 1 comment

#326 - build: bump actions/setup-python from 4.7.0 to 4.7.1

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, github_actions

#325 - build: bump python from 3.11-slim-bookworm to 3.12-slim-bookworm

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies, docker

#324 - feat: account for dependency file types

Pull Request - State: closed - Opened by maxrake over 1 year ago

#323 - Account for dependency file types

Issue - State: closed - Opened by maxrake over 1 year ago
Labels: high priority, task

GitHub / phylum-dev/phylum-ci issues and pull requests