Skip to content

Conversation

felickz
Copy link
Collaborator

@felickz felickz commented Aug 1, 2024

Without this the DR check happens too quickly to support any snapshot submissions happening concurrent outside this workflow.

should we parameterize?
Copy link

github-actions bot commented Aug 1, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Manifest Files

@@ -49,3 +49,4 @@ jobs:
# Example: advanced-security/reusable-workflows/.github/dependency-review.yml@main
config-file: ${{ steps.config.outputs.config }}
comment-summary-in-pr: "always"
retry-on-snapshot-warnings: "true" #This will add a 120s delay on any repos without a snapshot
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Todo: parameterize - otherwise this will add 120s delay by default while it spin waits for a snapshot every 10s until 120s

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So what happens if a snapshot never comes? Like for a Python or JS project

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants