GenAIExamples icon indicating copy to clipboard operation
GenAIExamples copied to clipboard

Add new third party dependency comment on PR

Open XuehaoSun opened this issue 1 year ago • 4 comments

Description

The summary of the proposed changes as long as the relevant motivation and context.

Issues

List the issue or RFC link this PR is working on. If there is no such link, please mark it as n/a.

Type of change

List the type of change like below. Please delete options that are not relevant.

  • [ ] Bug fix (non-breaking change which fixes an issue)
  • [ ] New feature (non-breaking change which adds new functionality)
  • [ ] Breaking change (fix or feature that would break existing design and interface)

Dependencies

List the newly introduced 3rd party dependency if exists.

Tests

Describe the tests that you ran to verify your changes.

XuehaoSun avatar Jun 11 '24 06:06 XuehaoSun

New packages found in PR: tiktoken # for test

github-actions[bot] avatar Jun 11 '24 06:06 github-actions[bot]

@XuehaoSun have you considered using https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review ?

It creates a comment like so: https://github.com/intel/ai-containers/pull/233#issuecomment-2223728306

tylertitsworth avatar Jul 12 '24 16:07 tylertitsworth

@XuehaoSun have you considered using https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review ?

It creates a comment like so: intel/ai-containers#233 (comment)

@XuehaoSun please check the comments.

chensuyue avatar Aug 12 '24 06:08 chensuyue

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

.github/workflows/dependency-review.yml
  • actions/checkout@4.*.*
  • actions/dependency-review-action@4.*.*
.github/workflows/bum_list_check.yml
  • actions/checkout@4.*.*

github-actions[bot] avatar Aug 12 '24 08:08 github-actions[bot]