Skip to content

feat: add flag -version #53

feat: add flag -version

feat: add flag -version #53

name: 'Dependency Review'
on:
pull_request:
branches: [ "main" ]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- id: checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- name: 'Dependency Review'
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
with:
# fail if a pull request introduce vulnerabilities of level "low" or higher
fail-on-severity: low
# allowed licenses in SPDX format, the action will fail if a new dependencies with a license not in this list is introduced
# if the license cant be detected, the action will inform but not fail
#allow-licenses: 'Apache-2.0, MIT, GPL-3.0-or-later, MPL-2.0'
# threshold for the OpenSSF Scorecard level, the action will get a warning in the CI
warn-on-openssf-scorecard-level: 3