mirror of
https://github.com/facebook/react-native.git
synced 2025-11-01 09:14:26 +00:00
Gijs Weterings
e2232090d7
Summary: parse-git-config is a transitive dep for Danger that hasn't been updated in years and has an unresolved CVE (CVE-2025-25975) Danger has moved away from this dependency yesterday and cut a new version, so we can update to resolve Changelog: [General][Fixed] Update Danger to 13.0.4 Reviewed By: cortinico Differential Revision: D73181590 fbshipit-source-id: e5c512e6f381725eea71d64555018327144e23be
27 lines
1.1 KiB
Markdown
27 lines
1.1 KiB
Markdown
## Danger
|
|
|
|
[Danger](http://danger.systems/js/) is a JavaScript runtime which helps you provide continuous feedback inside GitHub.
|
|
It's used inside Github Actions to analyze the contents of a GitHub pull request.
|
|
|
|
If you want to test changes to Danger, I'd recommend checking out an existing PR and then running the `danger pr` command.
|
|
You'll need a GitHub Public Access Token (PAT). It will look like `github_pat_<REDACTED>`.
|
|
|
|
So, for example:
|
|
|
|
```
|
|
cd packages/react-native-bots && yarn
|
|
DANGER_GITHUB_API_TOKEN=ghp_<REDACTED> yarn danger pr https://github.com/facebook/react-native/pull/1234
|
|
```
|
|
|
|
## Code Analysis Bot
|
|
|
|
The code analysis bot provides lint and other results as inline reviews on GitHub. It runs as part of the Circle CI analysis workflow.
|
|
|
|
If you want to test changes to the Code Analysis Bot, I'd recommend checking out an existing PR and then running the `analyze pr` command.
|
|
You'll need a GitHub token. You can re-use this one: `312d354b5c36f082cfe9` `07973d757026bdd9f196` (just remove the space).
|
|
So, for example:
|
|
|
|
```
|
|
GITHUB_TOKEN=[ENV_ABOVE] GITHUB_PR_NUMBER=1234 yarn lint-ci
|
|
```
|