chore: enable dependency-review workflow

.github/dependency-review/dependency-review-config.yml

@@ -0,0 +1,26 @@
+allow-licenses:
+  - '0BSD'
+  - 'Apache-2.0'
+  - 'Apache-2.0 AND MIT'
+  - 'BlueOak-1.0.0'
+  - 'BSD-1-Clause'
+  - 'BSD-2-Clause-FreeBSD'
+  - 'BSD-2-Clause'
+  - 'BSD-3-Clause-Attribution'
+  - 'BSD-3-Clause'
+  - 'BSL-1.0'
+  - 'CC-BY-3.0'
+  - 'CC-BY-4.0'
+  - 'CC0-1.0'
+  - 'curl'
+  - 'ISC'
+  - 'ISC AND MIT'
+  - 'JSON'
+  - 'MIT'
+  - 'OpenSSL'
+  - 'PDDL-1.0'
+  - 'PostgreSQL'
+  - 'Python-2.0'
+  - 'Unlicense'
+  - 'WTFPL'
+  - 'Zlib'

.github/workflows/dependency-review.yml

@@ -0,0 +1,18 @@
+name: 'Dependency Review'
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency_review:
+    name: Dependency Review
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@e2a5a1afd5d7305b13671410c52a31819ab9fad9 # v4.0.0 https://github.com/actions/checkout/commit/e2a5a1afd5d7305b13671410c52a31819ab9fad9
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@7bbfa034e752445ea40215fff1c3bf9597993d3f # v3.1.3 https://github.com/actions/dependency-review-action/commit/7bbfa034e752445ea40215fff1c3bf9597993d3f
+        with:
+          config-file: '.github/dependency-review/dependency-review-config.yml'