Merge branch 'main' into users/zhentan/experiement-report-track-file-… #1413
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Detector version bump reminder" | |
| on: | |
| push: | |
| paths: | |
| - "src/Microsoft.ComponentDetection.Detectors/**" | |
| permissions: | |
| pull-requests: write | |
| jobs: | |
| comment: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 | |
| with: | |
| egress-policy: audit | |
| - uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2 | |
| with: | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| message: | | |
| 👋 Hi! It looks like you modified some files in the `Detectors` folder. | |
| You may need to bump the detector versions if any of the following scenarios apply: | |
| * The detector detects more or fewer components than before | |
| * The detector generates different parent/child graph relationships than before | |
| * The detector generates different `devDependencies` values than before | |
| If none of the above scenarios apply, feel free to ignore this comment 🙂 |