microsoft
/
react-native-macos
зеркало из https://github.com/microsoft/react-native-macos.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
react-native-macos/packages/react-native-bots
История
Oleksandr Melnykov b40beebd26 Upgrade Danger to 11.2.1 to mitigate jsonwebtoken security vulnerability 
Summary:
Upgrades Danger to the latest available version to mitigate the jsonwebtoken security vulnerability.

Changelog:
[Internal] [Changed] - Upgrade Danger to 11.2.1 to mitigate jsonwebtoken security vulnerability

Reviewed By: cortinico

Differential Revision: D42505940

fbshipit-source-id: 740edc7316791e5afe894ecdd1e05e13d2ef1f2c
 		2023-01-13 12:27:51 -08:00
..
.babelrc Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
README.md Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
code-analysis-bot.js Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
dangerfile.js fix(internal, dangerfile): fix changelog entries for dangerfiles and PR template (#35541) 2022-12-05 02:38:42 -08:00
datastore.js Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
make-comment.js Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
package.json Upgrade Danger to 11.2.1 to mitigate jsonwebtoken security vulnerability 2023-01-13 12:27:51 -08:00
post-artifacts-link.js Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00
report-bundle-size.js Add bots as a yarn workspace and update danger action (#34652) 2022-09-12 22:03:34 -07:00

README.md

Danger

Danger is a JavaScript runtime which helps you provide continuous feedback inside GitHub. It's used inside Github Actions to analyze the contents of a GitHub pull request.

If you want to test changes to Danger, I'd recommend checking out an existing PR and then running the danger pr command. You'll need a GitHub Public Access Token (PAT). It will look like ghp_<REDACTED>.

So, for example:

DANGER_GITHUB_API_TOKEN=ghp_<REDACTED> yarn danger pr https://github.com/facebook/react-native/pull/1234

Code Analysis Bot

The code analysis bot provides lint and other results as inline reviews on GitHub. It runs as part of the Circle CI analysis workflow.

If you want to test changes to the Code Analysis Bot, I'd recommend checking out an existing PR and then running the analyze pr command. You'll need a GitHub token. You can re-use this one: 312d354b5c36f082cfe9 07973d757026bdd9f196 (just remove the space). So, for example:

GITHUB_TOKEN=[ENV_ABOVE] GITHUB_PR_NUMBER=1234 yarn lint-ci