name: dependency-review

# Thin caller that runs the org-wide reusable dependency review
# (Sea-Haven-Industries/.github :: callable-dependency-review.yaml) on this
# repo's PRs, failing on high-severity advisories in added dependencies.

on:
  pull_request:

permissions:
  contents: read

jobs:
  dependency-review:
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main