Skip to content

Commit

Permalink
github: add a dependency review action
Browse files Browse the repository at this point in the history
This action provides information about
* Which dependencies were added, removed, or updated.
* How many projects use these components.
* Vulnerability data for these dependencies.
* License type and compatibility.

For more info, read:
- [Understanding Your Software Supply Chain](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)
- [Dependency Review Action](https://github.com/actions/dependency-review-action)

Signed-off-by: Raghavendra Talur <[email protected]>
  • Loading branch information
raghavendra-talur committed Nov 22, 2024
1 parent ae79bbf commit c097984
Showing 1 changed file with 18 additions and 0 deletions.
18 changes: 18 additions & 0 deletions .github/workflows/dependency-review.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# SPDX-FileCopyrightText: The RamenDR authors
# SPDX-License-Identifier: Apache-2.0

---
name: dependency review
on: [pull_request]

permissions:
contents: read

jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v4
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4

0 comments on commit c097984

Please sign in to comment.