From 6228b41d0c88a3a9eab28932a0cd3e6ea99c2c59 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lachance Date: Fri, 21 Apr 2023 15:09:11 -0400 Subject: [PATCH] Create dependency-review.yml + Configure Dependency Review Dependency review helps you understand dependency changes and the security impact of these changes at every pull request. It provides an easily understandable visualization of dependency changes with a rich diff on the "Files Changed" tab of a pull request. The warning for .github/workflows/dependency-review.yml is expected. https://coveord.atlassian.net/browse/DEF-657 J:DEF-657 --- .github/workflows/dependency-review.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 00000000..99203c22 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,17 @@ +name: 'Dependency Review' + +on: + pull_request: + branches: [ "main" ] + +permissions: + contents: read + pull-requests: write + +jobs: + dependency-Review: + name: Review + uses: coveo/public-actions/.github/workflows/dependency-review.yml@main + with: + public: true + distributed: true