|
name: 'Dependency Review' |
|
on: [pull_request] |
|
|
|
permissions: |
|
contents: read |
|
|
|
jobs: |
|
dependency-review: |
|
runs-on: ubuntu-latest |
|
steps: |
|
- name: 'Checkout Repository' |
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
|
|
|
- name: 'Check Config' |
|
id: check_config |
|
run: | |
|
if [ -f .github/dependency-review-config.yml ]; then |
|
echo "dependency_review_config_exists=true" >> $GITHUB_ENV |
|
else |
|
echo "dependency_review_config_exists=false" >> $GITHUB_ENV |
|
fi |
|
|
|
- name: Dependency Review (local config) |
|
if: env.dependency_review_config_exists == 'true' |
|
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 |
|
with: |
|
config-file: './.github/dependency-review-config.yml' |
|
|
|
- name: Dependency Review |
|
if: env.dependency_review_config_exists == 'false' |
|
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 |
|
with: |
|
fail-on-severity: high |