chore: add dependency review workflow for pull requests

- Introduced a new GitHub Actions workflow for dependency review on pull requests to the master branch.
- Configured permissions for reading contents and writing pull requests.
- Included steps for checking out the repository and running the dependency review action with a summary comment in PRs.
This commit is contained in:
2025-12-05 23:15:44 -06:00
parent 9a9022ffb0
commit bf8c22c31a

22
.github/workflows/dependency-review.yml vendored Normal file
View File

@@ -0,0 +1,22 @@
name: 'Dependency review'
on:
pull_request:
branches: [ "master" ]
permissions:
contents: read
pull-requests: write
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout repository'
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: 'Dependency Review'
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4
with:
comment-summary-in-pr: always