From 60281fab4039fb2b02829754ccd12357b14901fd Mon Sep 17 00:00:00 2001 From: Naveen <172697+naveensrinivasan@users.noreply.github.com> Date: Wed, 18 May 2022 22:12:36 -0500 Subject: [PATCH] ci: included dependency review Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. Signed-off-by: Naveen <172697+naveensrinivasan@users.noreply.github.com> --- .github/workflows/dependency-review.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/workflows/dependency-review.yaml diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml new file mode 100644 index 000000000..e05efaffd --- /dev/null +++ b/.github/workflows/dependency-review.yaml @@ -0,0 +1,20 @@ +--- +name: 'Dependency Review' +# yamllint disable-line rule:truthy +on: + pull_request: + branches: + - '*' + + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v3 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v1