Add GitHub CI security and release workflows
This commit is contained in:
parent
9422cd0da4
commit
1006f41e45
10 changed files with 396 additions and 0 deletions
21
.github/workflows/dependency-review.yml
vendored
Normal file
21
.github/workflows/dependency-review.yml
vendored
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
name: Dependency Review
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
pull-requests: read
|
||||
|
||||
jobs:
|
||||
dependency-review:
|
||||
name: Dependency Review
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Review dependency changes
|
||||
uses: actions/dependency-review-action@v4
|
||||
with:
|
||||
fail-on-severity: moderate
|
||||
Loading…
Reference in a new issue