name: 'Dependency Review'
on: [pull_request]

jobs:
  dependency-review:
    runs-on: ubuntu-latest
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so that annotate_pr_with_ruff can access it.
      - uses: actions/checkout@v2
      - name: PR annotator with ruff
        uses: EnriqueSoria/annotate_pr_with_ruff@vX.X.X  # <-- Choose a release version
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}