From eeae1a6e22cec62c8b6fb4903166000add50694c Mon Sep 17 00:00:00 2001 From: Daedalus Date: Sun, 14 Jun 2026 22:19:44 +0200 Subject: [PATCH] ci: guard Dependency Review step so it can't fail the review check The actions/dependency-review-action errors at startup with "Dependency review is not supported on this repository" because the Dependency graph feature is disabled in repo settings. That made the `review` check red on 100% of PRs, training reviewers to ignore CI failures. Add continue-on-error: true to the step so the `review` check goes red only on real quality-gate failures. Remove the guard once Dependency graph is enabled in Settings -> Code security & analysis. Refs FLO-252. Co-Authored-By: Paperclip --- .github/workflows/commitperclip-review.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/commitperclip-review.yml b/.github/workflows/commitperclip-review.yml index c24205ff009..880fe9ea8e3 100644 --- a/.github/workflows/commitperclip-review.yml +++ b/.github/workflows/commitperclip-review.yml @@ -25,6 +25,13 @@ jobs: - name: Dependency Review uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 + # Non-fatal: the action errors at startup ("Dependency review is not + # supported on this repository") whenever the Dependency graph feature + # is disabled in repo settings. Guarding the step keeps the `review` + # check honest — it goes red only on real quality-gate failures, not on + # an unavailable platform feature. Remove this guard once Dependency + # graph is enabled (Settings -> Code security & analysis). See FLO-252. + continue-on-error: true with: base-ref: ${{ github.event.pull_request.base.sha }} head-ref: ${{ github.event.pull_request.head.sha }}