Skip to content

Bump actions/dependency-review-action from 3.1.0 to 3.1.2 #121

Bump actions/dependency-review-action from 3.1.0 to 3.1.2

Bump actions/dependency-review-action from 3.1.0 to 3.1.2 #121

name: "Dependency Review"
on:
pull_request:
branches:
- main
concurrency:
group: ${{ github.ref_name }}-deps-review
cancel-in-progress: true
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-22.04
permissions:
contents: read # for actions/checkout
pull-requests: write # for actions/dependency-review-action to post comments
steps:
- name: "Checkout Repository"
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: "Dependency Review"
uses: actions/dependency-review-action@fde92acd0840415674c16b39c7d703fc28bc511e # v3.1.2
with:
config-file: "nginxinc/k8s-common/dependency-review-config.yml@main"