We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 741d473 commit 9347392Copy full SHA for 9347392
.github/workflows/dependency_enforcement.yml
@@ -0,0 +1,20 @@
1
+# For most projects, this workflow file will not need changing; you simply need
2
+# to commit it to your repository.
3
+#
4
+# Reach out on Teams at 'Corp DevOps / Github Community' to get help.
5
+
6
+name: "Dependency Review"
7
+on: [pull_request]
8
+permissions:
9
+ contents: read
10
+jobs:
11
+ dependency-review:
12
+ runs-on: ubuntu-latest
13
+ steps:
14
+ - name: "Checkout Repository"
15
+ uses: actions/checkout@v4
16
+ - name: Dependency Review
17
+ uses: actions/dependency-review-action@v4
18
+ with:
19
+ fail-on-severity: high
20
+ fail-on-scopes: runtime, development
0 commit comments