diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
index 09e0706..c505155 100644
--- a/.github/workflows/dependency-review.yaml
+++ b/.github/workflows/dependency-review.yaml
@@ -17,5 +17,9 @@ jobs:
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 #4.9.0
         with:
+          # If it's a PR, use the target branch. If it's a push, use 'main'.
+          base-ref: ${{ github.event.pull_request.base.ref || 'main' }}
+          # If it's a PR, use the source branch. If it's a push, use the current commit.
+          head-ref: ${{ github.event.pull_request.head.ref || github.sha }}
           fail-on-severity: high
           show-patched-versions: true
\ No newline at end of file