diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..e8c657c --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,16 @@ +# Source repository: https://github.com/actions/dependency-review-action +# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement +name: 'Dependency Review' + +on: + pull_request: + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-20.04 + steps: + - uses: actions/checkout@v3 + - uses: actions/dependency-review-action@v1