Validate that deny-packages purls are complete

Author: juxtin

__tests__/config.test.ts

@@ -60,6 +60,14 @@ test('it raises an error when an invalid package-url is used for deny-packages',
   await expect(readConfig()).rejects.toThrow(`Error parsing package-url`)
 })
 
+test('it raises an error when a nameless package-url is used for deny-packages', async () => {
+  setInput('deny-packages', 'pkg:npm/@namespace/')
+
+  await expect(readConfig()).rejects.toThrow(
+    `Error parsing package-url: name is required`
+  )
+})
+
 test('it raises an error when an argument to deny-groups is missing a namespace', async () => {
   setInput('deny-groups', 'pkg:npm/my-fun-org')
 

dist/index.js

@@ -18,6 +18,12 @@ const PackageURL = z
         message: `Error parsing package-url: ${purl.error}`
       })
     }
+    if (!purl.name) {
+      context.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Error parsing package-url: name is required`
+      })
+    }
   })
 
 const PackageURLWithNamespace = z