@factorialco/gat 2.3.0 → 2.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/workflow.js +3 -3
- package/package.json +3 -3
package/dist/workflow.js
CHANGED
|
@@ -23,7 +23,7 @@ import kebabCase from "lodash/kebabCase";
|
|
|
23
23
|
import fs from "fs";
|
|
24
24
|
import path from "path";
|
|
25
25
|
import { promisify } from "util";
|
|
26
|
-
import
|
|
26
|
+
import axios from 'axios';
|
|
27
27
|
import { isUseStep } from "./step";
|
|
28
28
|
const writeFilePromise = promisify(fs.writeFile);
|
|
29
29
|
const DEFAULT_RUNNERS = ["ubuntu-22.04"];
|
|
@@ -40,8 +40,8 @@ const supplyChainAttack = (step) => __awaiter(void 0, void 0, void 0, function*
|
|
|
40
40
|
if (!match)
|
|
41
41
|
return uses;
|
|
42
42
|
const { repository, version } = match.groups;
|
|
43
|
-
const response = yield
|
|
44
|
-
const tags =
|
|
43
|
+
const response = yield axios.get(`https://api.github.com/repos/${repository}/tags`);
|
|
44
|
+
const tags = response.data;
|
|
45
45
|
const tag = tags.find((tag) => tag.name === version);
|
|
46
46
|
if (!tag)
|
|
47
47
|
return uses;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@factorialco/gat",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.4.0",
|
|
4
4
|
"description": "Write your GitHub Actions workflows using TypeScript",
|
|
5
5
|
"bin": {
|
|
6
6
|
"gat": "dist/cli.js"
|
|
@@ -37,9 +37,9 @@
|
|
|
37
37
|
"vitest": "^0.34.6"
|
|
38
38
|
},
|
|
39
39
|
"dependencies": {
|
|
40
|
+
"axios": "^1.6.0",
|
|
40
41
|
"js-yaml": "^4.1.0",
|
|
41
|
-
"lodash": "^4.17.21"
|
|
42
|
-
"node-fetch": "^3.3.2"
|
|
42
|
+
"lodash": "^4.17.21"
|
|
43
43
|
},
|
|
44
44
|
"repository": {
|
|
45
45
|
"type": "git",
|