Skip to content

test(verify): pin spaced-path cred reads into the verify gate #8

test(verify): pin spaced-path cred reads into the verify gate

test(verify): pin spaced-path cred reads into the verify gate #8

name: dependency review
on:
pull_request:
branches: [main]
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
# no checkout: the action compares base/head manifests via the API and
# never reads the working tree. don't put the untrusted merge ref on
# the runner for nothing.
- uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
with:
fail-on-severity: low