chore(COD-4237): removing unused option --eval-indirect-dependencies

Author: jeremydubreil

action.yaml

@@ -19,10 +19,6 @@ inputs:
   footer:
     description: 'A block of Markdown that will be appended to any PR comments posted'
     required: false
-  eval-indirect-dependencies:
-    description: 'Show vulnerabilities found in transitive dependencies'
-    required: false
-    default: false
   autofix:
     description: 'Set to true to enable automated pull-requests for fix suggestions'
     required: false
@@ -80,7 +76,7 @@ runs:
       shell: bash
       if: ${{ inputs.debug == 'true' }}
       run: |
-          echo "LW_LOG=debug" >> $GITHUB_ENV
+        echo "LW_LOG=debug" >> $GITHUB_ENV
     - if: steps.cache.outputs.cache-hit != 'true'
       shell: bash
       run: |
@@ -118,5 +114,4 @@ runs:
         debug: '${{ inputs.debug }}'
         token: '${{ inputs.token || github.token }}'
         footer: '${{ inputs.footer }}'
-        eval-indirect-dependencies: '${{ inputs.eval-indirect-dependencies }}'
         autofix: '${{ inputs.autofix }}'

src/index.ts

@@ -1,11 +1,12 @@
 import { error, getInput, info, setOutput, warning } from '@actions/core'
-import { existsSync, appendFileSync } from 'fs'
+import { appendFileSync, existsSync } from 'fs'
 import {
   downloadArtifact,
   postCommentIfInPr,
   resolveExistingCommentIfFound,
   uploadArtifact,
 } from './actions'
+import { downloadKeys, trustedKeys } from './keys'
 import { compareResults, createPRs, printResults } from './tool'
 import {
   autofix,
@@ -15,12 +16,10 @@ import {
   getActionRef,
   getMsSinceStart,
   getOptionalEnvVariable,
-  getOrDefault,
   getRequiredEnvVariable,
   getRunUrl,
   telemetryCollector,
 } from './util'
-import { downloadKeys, trustedKeys } from './keys'
 
 const scaSarifReport = 'scaReport/output.sarif'
 const scaReport = 'sca.sarif'
@@ -42,7 +41,6 @@ async function runAnalysis() {
 
   info('Analyzing ' + target)
   telemetryCollector.addField('tools', 'sca')
-  const indirectDeps = getInput('eval-indirect-dependencies')
   const toUpload: string[] = []
 
   await downloadKeys()
@@ -62,9 +60,6 @@ async function runAnalysis() {
     trustedKeys,
     '--secret',
   ]
-  if (indirectDeps.toLowerCase() === 'false') {
-    args.push('--eval-direct-only')
-  }
   if (debug()) {
     args.push('--debug')
   }