Skip to content

build(deps): Bump actions/dependency-review-action from 3.1.5 to 4.0.0 #76

build(deps): Bump actions/dependency-review-action from 3.1.5 to 4.0.0

build(deps): Bump actions/dependency-review-action from 3.1.5 to 4.0.0 #76

Workflow file for this run

---
name: PR Dependency Review
on: [pull_request]
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
name: Scan for issues
permissions:
pull-requests: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
with:
egress-policy: audit
- name: Checkout Repository
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Dependency Review
uses: actions/dependency-review-action@4901385134134e04cec5fbe5ddfe3b2c5bd5d976 # v4.0.0
with:
fail-on-severity: low
license-check: true
vulnerability-check: true
comment-summary-in-pr: on-failure
allow-licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, MIT