Add dependency-review caller workflow (#25)

* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)

* chore: add .env to .gitignore
This commit is contained in:
Adam Moussa 2026-06-05 12:34:08 -04:00 • committed by GitHub
parent 2405b9bf47
commit 518d139ee7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions

View file

@ -0,0 +1,6 @@
name: Dependency Review
on:
pull_request:
jobs:
review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main

3
.gitignore vendored
View file

@ -3,3 +3,6 @@ cdk.out/
*.js
*.d.ts
*.js.map
.env
.env.*