dependency-review.yml

1name: Dependency Review
2
3on:
4  pull_request:
5    branches: ['main']
6
7permissions:
8  contents: read
9  pull-requests: write
10
11jobs:
12  dependency-review:
13    runs-on: ubuntu-latest
14    steps:
15      - name: Checkout code
16        uses: actions/checkout@v4
17
18      - name: Dependency Review
19        uses: actions/dependency-review-action@v4
20        with:
21          fail-on-severity: high
22          comment-summary-in-pr: always