Skip to content
22 changes: 22 additions & 0 deletions .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
name: Dependency Review

on:
pull_request:
branches: [master]

permissions:
contents: read
pull-requests: write

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Dependency Review
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
with:
fail-on-severity: moderate
allow-licenses: MIT, Apache-2.0
10 changes: 2 additions & 8 deletions .github/workflows/deploy.production.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,7 @@ permissions:
contents: read # Required to read the repository contents
packages: write # Required to publish packages

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Dependency Review
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1

jobs:
build-and-publish-workers:
runs-on: ubuntu-latest
steps:
Expand Down Expand Up @@ -295,4 +289,4 @@ jobs:
with:
app-name: ${{ vars.AIRFLOW_SCHEDULER_NAME }}
publish-profile: ${{ secrets.AIRFLOW_SCHEDULER_PUBLISH_PROFILE }}
images: ${{ env.registry }}/${{ env.repo-owner }}/${{ env.app-name }}/airflow-scheduler:${{ github.sha }}
images: ${{ env.registry }}/${{ env.repo-owner }}/${{ env.app-name }}/airflow-scheduler:${{ github.sha }}
8 changes: 1 addition & 7 deletions .github/workflows/deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,6 @@ permissions:
packages: write # Required to publish packages

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Dependency Review
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1

build-and-publish-workers:
runs-on: ubuntu-latest
steps:
Expand Down Expand Up @@ -395,4 +389,4 @@ jobs:
with:
app-name: ${{ vars.AZURE_WEBAPP_NEXT_NAME }}
publish-profile: ${{ secrets.AZURE_WEBAPP_NEXT_PUBLISH_PROFILE }}
package: ${{ github.workspace }}/frontendwebapp
package: ${{ github.workspace }}/frontendwebapp
Loading