chore: restore dependency review config

sgammon · Aug 14, 2023 · 515e316 · 515e316
1 parent df8e07b
commit 515e316
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/on.pr.yml b/.github/workflows/on.pr.yml
@@ -7,6 +7,22 @@ name: "PR"
       - main
 
 jobs:
+  dependency-review:
+    name: "Dependency Review"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
+        with:
+          egress-policy: audit
+
+      - name: "Checkout Repository"
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+      - name: "Dependency Review"
+        uses: actions/dependency-review-action@7d90b4f05fea31dde1c4a1fb3fa787e197ea93ab # v3.0.7
+        with:
+          config-file: "./.github/dependency-review-config.yml"
+
   test:
     name: "Test (${{ matrix.label }})"
     uses: ./.github/workflows/module.test.yml