From 518d139ee73b42937a3e5876546ef6ab59eeaadf Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 5 Jun 2026 12:34:08 -0400
Subject: [PATCH] Add dependency-review caller workflow (#25)

* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)

* chore: add .env to .gitignore
---
 .github/workflows/dependency-review.yml | 6 ++++++
 .gitignore                              | 3 +++
 2 files changed, 9 insertions(+)
 create mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 0000000..2c5d47c
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,6 @@
+name: Dependency Review
+on:
+  pull_request:
+jobs:
+  review:
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main
diff --git a/.gitignore b/.gitignore
index b305898..d69549d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,6 @@ cdk.out/
 *.js
 *.d.ts
 *.js.map
+
+.env
+.env.*