Skip to content

Bump docker/setup-buildx-action from 79abd3f86f79a9d68a23c75a09a9a85889262adf to edfb0fe6204400c56fbfd3feba3fe9ad1adfa345 #136

Bump docker/setup-buildx-action from 79abd3f86f79a9d68a23c75a09a9a85889262adf to edfb0fe6204400c56fbfd3feba3fe9ad1adfa345

Bump docker/setup-buildx-action from 79abd3f86f79a9d68a23c75a09a9a85889262adf to edfb0fe6204400c56fbfd3feba3fe9ad1adfa345 #136

# Dependency Review Action
#
# This Action will scan dependency manifest files that change as part of a Pull Request,
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
# Once installed, if the workflow run is marked as required,
# PRs introducing known-vulnerable packages will be blocked from merging.
#
# Source repository: https://github.com/actions/dependency-review-action
name: 'Dependency Review'
on:
pull_request:
branches: [ "main", "release", "development", "nam20485" ]
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
steps:
- name: 'Checkout Repository'
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: 'Dependency Review'
uses: actions/dependency-review-action@01bc87099ba56df1e897b6874784491ea6309bc4 # v3.1.4
with:
comment-summary-in-pr: true