From 5487f211b8abbdbb392a52ba3d04ee17b461eca8 Mon Sep 17 00:00:00 2001 From: Shea Lucero Date: Sat, 9 May 2026 14:12:56 -0500 Subject: [PATCH] ci(security): add dependency review workflow --- .github/workflows/dependency-review.yml | 26 +++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..af0cebc --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,26 @@ +name: Dependency review + +on: + pull_request: + branches: ["main"] + workflow_dispatch: + +permissions: + contents: read + pull-requests: write + +jobs: + dependency-review: + name: Dependency review + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Review dependency changes + uses: actions/dependency-review-action@v4 + with: + comment-summary-in-pr: always + fail-on-severity: moderate + retry-on-snapshot-warnings: true