Sudo-Ivan
bf8c22c31a
- Introduced a new GitHub Actions workflow for dependency review on pull requests to the master branch. - Configured permissions for reading contents and writing pull requests. - Included steps for checking out the repository and running the dependency review action with a summary comment in PRs.
22 lines
489 B
YAML
22 lines
489 B
YAML
name: 'Dependency review'
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [ "master" ]
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
dependency-review:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: 'Checkout repository'
|
|
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
|
|
|
- name: 'Dependency Review'
|
|
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4
|
|
with:
|
|
comment-summary-in-pr: always |