-
Notifications
You must be signed in to change notification settings - Fork 2k
31 lines (27 loc) · 953 Bytes
/
dependency-review.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
name: "Dependency Review"
on:
pull_request:
branches:
- main
- release-*
merge_group:
concurrency:
group: ${{ github.ref_name }}-deps-review
cancel-in-progress: true
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-22.04
permissions:
contents: read # for actions/checkout
pull-requests: write # for actions/dependency-review-action to post comments
steps:
- name: "Checkout Repository"
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
- name: "Dependency Review"
uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2
with:
config-file: "nginxinc/k8s-common/dependency-review-config.yml@main"
base-ref: ${{ github.event.pull_request.base.sha || github.event.repository.default_branch }}
head-ref: ${{ github.event.pull_request.base.sha || github.ref }}