ci(node): add dependency review job

Refs: KEH-351

Author: antervon-gofore

.github/workflows/ci-node.yml

@@ -53,6 +53,26 @@ on:
   workflow_dispatch:
 
 jobs:
+  dependency-review:
+    name: Dependency Review
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          persist-credentials: false
+
+      - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
+        with:
+          fail-on-severity: low
+          license-check: false
+          vulnerability-check: true
+          comment-summary-in-pr: on-failure
+          show-patched-versions: true
+
   commitlint:
     name: Check commit messages
     runs-on: ubuntu-latest