PR feedback

aws-amplify · May 7, 2024 · 9c63140 · 9c63140
1 parent 1336d9f
commit 9c63140
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 22 deletions.
diff --git a/.github/workflows/dependency_review.yml b/.github/workflows/dependency_review.yml
diff --git a/.github/workflows/health_checks.yml b/.github/workflows/health_checks.yml
@@ -427,3 +427,15 @@ jobs:
         uses: github/codeql-action/analyze@e4262713b504983e61c7728f5452be240d9385a7 # version 2.14.3
         with:
           category: /language:javascript
+  dependency-review:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # version 3.6.0
+      - name: Dependency Review
+        uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # version 4.3.2
+        with:
+          config-file: ./.github/dependency_review_config.yml