Merge pull request dependabot#5973 from dependabot/mattt/dependency-r…

…eview Add Dependency Review workflow
ylecuyer · Oct 25, 2022 · d9c5828 · d9c5828
2 parents ce91e1c + a5a4698
commit d9c5828
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -0,0 +1,15 @@
+name: Dependency Review
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    name: Dependency Review
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+      - name: Perform Dependency Review
+        uses: actions/dependency-review-action@v2