Skip to content

Bump the github group across 1 directory with 2 updates #9

Bump the github group across 1 directory with 2 updates

Bump the github group across 1 directory with 2 updates #9

Workflow file for this run

---
name: dependency
on:
# Review dependencies on pull requests to the default branch
pull_request:
branches: ["main"]
# Declare default permissions as read-only
permissions: read-all
jobs:
dependency-review:
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- name: 🔒 harden runner
uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
with:
egress-policy: audit
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: 🔂 dependency review
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
with:
fail-on-severity: "high"
deny-licenses: "AGPL-1.0, AGPL-3.0"
comment-summary-in-pr: true
warn-on-openssf-scorecard-level: 3