diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..713d619 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,19 @@ +name: 'Dependency Review' +on: + pull_request: + branches: [ "develop", "master", "main" ] + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v4 + - name: Dependency Review + uses: actions/dependency-review-action@v4 + with: + config-file: 'snapdocs/prodsec/.github/dependency-review-configuration.yml@main' + external-repo-token: ${{ secrets.REPO_ORG_ACCESS_PAT }} \ No newline at end of file