Skip to content

Commit

Permalink
github: add a dependency review action
Browse files Browse the repository at this point in the history
This action provides information about
* Which dependencies were added, removed, or updated.
* How many projects use these components.
* Vulnerability data for these dependencies.
* License type and compatibility.

For more info, read

https://docs.github.com/en/code-security/\
supply-chain-security/understanding-your-software-supply-chain\
/about-dependency-review

https://github.com/actions/dependency-review-action

Signed-off-by: Raghavendra Talur <[email protected]>
  • Loading branch information
raghavendra-talur committed Nov 22, 2024
1 parent 8c333b2 commit e8bc424
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions .github/workflows/dependency-review.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
name: 'Dependency Review'

Check warning on line 1 in .github/workflows/dependency-review.yaml

View workflow job for this annotation

GitHub Actions / Linters

1:1 [document-start] missing document start "---"
on: [pull_request]

Check warning on line 2 in .github/workflows/dependency-review.yaml

View workflow job for this annotation

GitHub Actions / Linters

2:1 [truthy] truthy value should be one of [false, true]

permissions:
contents: read

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v4
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4

0 comments on commit e8bc424

Please sign in to comment.