misc: add CI actions/dependency-review-action for security (#7168)

This commit is contained in:
Sébastien Lorber 2022-04-13 19:22:00 +02:00 committed by GitHub
parent ce08891af3
commit 6306cbc266
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 1 deletions

View File

@ -15,7 +15,7 @@ jobs:
name: Publish Canary
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 #v3
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # v3
with:
fetch-depth: 0 # Needed to get the commit number with "git rev-list --count HEAD"
- name: Set up Node

14
.github/workflows/dependency-review.yml vendored Normal file
View File

@ -0,0 +1,14 @@
name: 'Dependency Review'
on: [pull_request]
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 #v3
- name: 'Dependency Review'
uses: actions/dependency-review-action@3f943b86c9a289f4e632c632695e2e0898d9d67d # v1