name: Dependency Review
on:
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  select-runner:
    # Picks GitHub-hosted while Actions is operational, the org self-hosted
    # runner otherwise. See callable-select-runner.yaml for the policy.
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-select-runner.yaml@REPLACE-ME # vX.Y.Z

  dependency-review:
    needs: select-runner
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@REPLACE-ME # vX.Y.Z
    with:
      runner: ${{ needs.select-runner.outputs.runner }}