ci: dependency-review needs refs for merge_queue (#1961)

See actions/dependency-review-action#456 (comment)
mozilla · Jul 4, 2024 · 34a5126 · 34a5126
1 parent 3f1b183
commit 34a5126
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -26,3 +26,6 @@ jobs:
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
+        with:
+          base-ref: ${{ github.event.pull_request.base.sha || 'main' }}
+          head-ref: ${{ github.event.pull_request.head.sha || github.ref }}