Skip to content

chore(ci): bump actions/stale from b69b346013879cedbf50c69f572cd85439a41936 to 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 #126

chore(ci): bump actions/stale from b69b346013879cedbf50c69f572cd85439a41936 to 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6

chore(ci): bump actions/stale from b69b346013879cedbf50c69f572cd85439a41936 to 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 #126

# Dependency Review Action
#
# This Action will scan dependency manifest files that change as part of a Pull Request,
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
# Once installed, if the workflow run is marked as required,
# PRs introducing known-vulnerable packages will be blocked from merging.
#
# Source repository: https://github.com/actions/dependency-review-action
name: 'Dependency Review'
on:
pull_request:
branches:
- "**"
paths-ignore:
- '**/*.md'
permissions:
contents: read # for actions/checkout to fetch code
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: 'Dependency Review'
uses: actions/dependency-review-action@c74b580d73376b7750d3d2a50bfb8adc2c937507 # v3.1.5