chore(COD-4237): removing deprecated option --eval-indirect-dependencies (#212)

Author: jeremydubreil

action.yaml

@@ -20,6 +20,7 @@ inputs:
     description: 'A block of Markdown that will be appended to any PR comments posted'
     required: false
   eval-indirect-dependencies:
+    deprecationMessage: 'Deprecated in favor of SCA configurations'
     description: 'Show vulnerabilities found in transitive dependencies'
     required: false
     default: false
@@ -95,5 +96,4 @@ runs:
         debug: '${{ inputs.debug }}'
         token: '${{ inputs.token || github.token }}'
         footer: '${{ inputs.footer }}'
-        eval-indirect-dependencies: '${{ inputs.eval-indirect-dependencies }}'
         artifact-prefix: '${{ inputs.artifact-prefix }}'

src/index.ts

@@ -41,17 +41,13 @@ async function runAnalysis() {
 
   info('Analyzing ' + target)
   telemetryCollector.addField('tools', 'sca')
-  const indirectDeps = getInput('eval-indirect-dependencies')
   const toUpload: string[] = []
 
   // command to print both sarif and lwjson formats
   var args = ['sca', 'scan', '.', '-o', scaDir, '--formats', 'sarif,lw-json', '--deployment', 'ci']
   if (target === 'push') {
     args.push('--save-results')
   }
-  if (indirectDeps.toLowerCase() === 'false') {
-    args.push('--eval-direct-only')
-  }
   if (debug()) {
     args.push('--debug')
   }