From aab98359d51e9f6ddab5e077c11cd752a8d7b227 Mon Sep 17 00:00:00 2001 From: haris-siddiqui-m Date: Thu, 21 Nov 2024 13:27:01 -0600 Subject: [PATCH] Updates dependency-review.yml workflow file to point to the prodsec repo --- .github/workflows/dependency-review.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..713d619 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,19 @@ +name: 'Dependency Review' +on: + pull_request: + branches: [ "develop", "master", "main" ] + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v4 + - name: Dependency Review + uses: actions/dependency-review-action@v4 + with: + config-file: 'snapdocs/prodsec/.github/dependency-review-configuration.yml@main' + external-repo-token: ${{ secrets.REPO_ORG_ACCESS_PAT }} \ No newline at end of file