support event types other than `pull_request`

[actions]

support event types other than `pull_request`

[febuiles]

Actually both PRs already contain documentation, 2.1.0 has been released with support for other event types!

If you see something behaving funny please open a new issue.

[febuiles]

Thanks for the insight @Aaronkala! Maybe it'd make sense to add extra optional parameters to the Action so it accepts head/base revisions. Leaving this open while considering other options (PRs to mitigate this issue in the meantime are welcome!)

[Aaronkala]

We would love to have this also. We we're trying to enable the github merge queue but due to the actions running on push this wasn't possible.

The options we currently have are:

• Stop requiring the dependency-review action as a "needed check"
• Don't use merge queue

[Aaronkala]

To me it looks like the head_ref and base_ref are only available on pull_request or pull_request_target events.

repo and owner should be available in all

From the docs: https://docs.github.com/en/actions/learn-github-actions/contexts#github-context

[febuiles]

Thanks to the amazing work by @WillDaSilva the Action should now support event types different to "pull_request". You can test this by using the optional-refs branch of this repo:

      - name: 'Dependency Review'
        uses: actions/dependency-review-action@optional-refs
        with:
          base-ref: ...
          head-ref: ...

More info about defaults, and how to pass refs to other types of events in: https://github.com/actions/dependency-review-action/tree/optional-refs#configuration.

If no issues are found I'll cut a new release before the end of the week.

[PatMyron]

We have hundreds of repos using one reusable workflow with actions added centrally, and it's triggered by more event types like push, schedule, workflow_dispatch, etc

[PatMyron]

workaround: if: github.event_name == 'pull_request' from fastify/fastify#3884 (comment)

[febuiles]

@PatMyron @Aaronkala Thanks for the report! Do these other event types support these fields?

dependency-review-action/src/main.ts

Lines 21 to 24 in 0e68684

	owner: github.context.repo.owner,
	repo: github.context.repo.repo,
	baseRef: pull_request.base.sha,
	headRef: pull_request.head.sha

If that's the case I think we can update the code to include them. I'm planning to start with workflow_dispatch, what else would benefit from this?

[Serpentiel]

hey 👋, just ran into this issue too, and push event support is exactly what I'm looking for :)