ci(deps): Add a workflow which blocks PRs containing dependencies on …

…vulnerable packages (#977)
melink14 · Apr 18, 2022 · cb2406a · cb2406a
1 parent 449c50a
commit cb2406a
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/scan-deps.yml b/.github/workflows/scan-deps.yml
@@ -0,0 +1,14 @@
+name: 'Dependency Review'
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v3
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v1