ci: add dependency review job to PR workflow

weaveworks · Jan 26, 2025 · 1cfcbf7 · 1cfcbf7
1 parent 94ab5e4
commit 1cfcbf7
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 15 deletions.
diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -69,6 +69,13 @@ jobs:
       - name: Check that make fakes has been run
         run: git diff --no-ext-diff --exit-code
 
+  ci-dependency-review:
+    name: CI Dependency Review
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
+
   build-push-image:
     name: CI Build Image
     uses: ./.github/workflows/build-push-image.yaml