Node / rns-mirrors / Reticulum-Go.git / files / .github / workflows / dependency-review.yml

Displaying Raw • Download

# Pinned actions (bump tag and SHA together when upgrading):

# actions/checkout@v7.0.0 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

# actions/dependency-review-action@v5.0.0 a1d282b36b6f3519aa1f3fc636f609c47dddb294

#

name: Dependency Review

on:

pull_request:

concurrency:

group: dependency-review-${{ github.event.pull_request.number || github.ref }}

cancel-in-progress: true

permissions:

contents: read

pull-requests: read

jobs:

dependency-review:

name: Review dependency changes

runs-on: ubuntu-latest

timeout-minutes: 15

steps:

- name: Checkout

uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

- name: Dependency review

uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

with:

fail-on-severity: high