From 90e845afe434abf750adb52a5159b04d00cff34c Mon Sep 17 00:00:00 2001 From: Shane Bonham Date: Wed, 18 Dec 2024 14:10:41 -0800 Subject: [PATCH] Add support for an `ignore_list` input This will allow passing in a space-separated list of CVS identifiers which the check will ignore. --- README.md | 4 +++- action.yml | 8 +++++++- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f69335a..bdc981d 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,9 @@ See: ## Inputs -None. +| Name | Description | Required | Default | +|:-:|:-:|:-:|:-:| +| `ignore_list` | "Space-separated list of CVEs to ignore (e.g., CVE-2023-26141 CVE-2021-41182 CVE-2021-41183)" | false | "" | ## Outputs diff --git a/action.yml b/action.yml index 3fdbabf..412cf46 100644 --- a/action.yml +++ b/action.yml @@ -1,6 +1,12 @@ name: "Run Bundler Audit" description: "Runs bundle-audit check --update and outputs results." +inputs: + ignore_list: + description: "Space-separated list of CVEs to ignore (e.g., CVE-2023-26141 CVE-2021-41182 CVE-2021-41183)" + required: false + default: "" + outputs: has_vulnerabilities: description: "True if vulnerabilities are found, false otherwise" @@ -25,7 +31,7 @@ runs: - name: Run Bundler Audit id: audit run: | - bundle-audit check --update > audit_output.txt || true + bundle-audit check --update --ignore ${{ inputs.ignore_list }} > audit_output.txt || true shell: bash - name: Check for Vulnerabilities