mirror of
https://github.com/Sea-Haven-Industries/file-share.git
synced 2026-09-30 14:43:16 +00:00
17 lines
624 B
YAML
17 lines
624 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
|
|
with:
|
|
# GHSA-rgw5-rvv9-x895 (brace-expansion DoS bypass of CVE-2026-14257):
|
|
# bundled transitive inside aws-cdk-lib (inBundle, not overridable via
|
|
# lockfile); adjudicated in .security-review/suppressions.json.
|
|
# aws-cdk-lib 2.263.0 bundles 5.0.8 (fixes GHSA-3jxr-9vmj-r5cp). Remove
|
|
# when aws-cdk-lib bundles >=5.0.9.
|
|
allow-ghsas: GHSA-rgw5-rvv9-x895
|