Skip to content

Bump codecov/codecov-action from 4.6.0 to 5.0.0 #228

Bump codecov/codecov-action from 4.6.0 to 5.0.0

Bump codecov/codecov-action from 4.6.0 to 5.0.0 #228

name: 'Dependency Review'
on: [pull_request, merge_group]
permissions: read-all
jobs:
dependency-review:
runs-on: ubuntu-latest
if: ${{ github.repository_owner == 'openvinotoolkit' }}
steps:
- name: Clone OpenVINO
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Dependency Review
uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
with:
config-file: './.github/dependency_review.yml'
base-ref: ${{ github.pull_request.base.sha || github.event.merge_group.base_ref }}
head-ref: ${{ github.pull_request.head.sha || github.ref }}