Skip to content

Commit f8d10d7

Browse files
committed
vulnerableRequirements might contain version without eq prefix
1 parent 70d13a0 commit f8d10d7

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/dependabot/verified_commits.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -127,7 +127,7 @@ export async function getAlert (name: string, version: string, directory: string
127127
const nodes = await fetchVulnerabilityAlerts(client, context.repo.owner, context.repo.repo);
128128
core.debug(`Fetched ${nodes.length} vulnerability alerts`);
129129

130-
const found = nodes.find(a => (version === '' || a.vulnerableRequirements === `= ${version}`) &&
130+
const found = nodes.find(a => (version === '' || a.vulnerableRequirements === `${version}` || a.vulnerableRequirements === `= ${version}`) &&
131131
trimSlashes(a.vulnerableManifestPath) === trimSlashes(`${directory}/${a.vulnerableManifestFilename}`) &&
132132
a.securityVulnerability.package.name === name)
133133

0 commit comments

Comments
 (0)