From 7b0524cd9367cd8b6e467a49f0f32656e5cc832b Mon Sep 17 00:00:00 2001 From: CarrJ Date: Tue, 12 May 2026 08:52:20 +0100 Subject: [PATCH] - only run dependency checks for main branch --- .github/workflows/dependency-review.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index 09e0706..c505155 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -17,5 +17,9 @@ jobs: - name: 'Dependency Review' uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 #4.9.0 with: + # If it's a PR, use the target branch. If it's a push, use 'main'. + base-ref: ${{ github.event.pull_request.base.ref || 'main' }} + # If it's a PR, use the source branch. If it's a push, use the current commit. + head-ref: ${{ github.event.pull_request.head.ref || github.sha }} fail-on-severity: high show-patched-versions: true \ No newline at end of file