chore(ci): add org dependency-review caller (INFRA-125) #8

2026-07-06T21:13:09Z

amoussa1229 commented

2026-07-06 21:13:09 +00:00

(Migrated from github.com)

Drops the standard org callable-dependency-review caller into this repo (.github/workflows/dependency-review.yml), matching the canonical stub used verbatim across 21+ sibling repos.

This repo guards AWS account 396287094661 and was missing the org dependency-review caller (audit gap). The gap is a symptom of the 9-step new-repo provisioning checklist being skipped when this repo was created, per INFRA-125.

Refs INFRA-125.

Drops the standard org callable-dependency-review caller into this repo (`.github/workflows/dependency-review.yml`), matching the canonical stub used verbatim across 21+ sibling repos. This repo guards AWS account 396287094661 and was missing the org dependency-review caller (audit gap). The gap is a symptom of the 9-step new-repo provisioning checklist being skipped when this repo was created, per INFRA-125. Refs INFRA-125.

github-advanced-security[bot] (Migrated from github.com) reviewed 2026-07-06 21:13:49 +00:00

.github/workflows/dependency-review.yml

					
				@ -0,0 +3,4 @@

				  pull_request:

				jobs:

				  review:

				    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main

github-advanced-security[bot] (Migrated from github.com) commented

2026-07-06 21:13:49 +00:00

CodeQL / Workflow does not contain permissions

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}

Show more details

## CodeQL / Workflow does not contain permissions Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}} [Show more details](https://github.com/Sea-Haven-Industries/seahaven-external-dev-baseline/security/code-scanning/2)

seahaven-openswe[bot] (Migrated from github.com) reviewed 2026-07-06 21:14:40 +00:00

seahaven-openswe[bot] (Migrated from github.com) left a comment

✅ Open SWE Review: No issues found

Open SWE reviewed this PR and found no potential bugs to report.

Open in Web

## ✅ Open SWE Review: No issues found Open SWE reviewed this PR and found no potential bugs to report. [Open in Web](https://openswe.seahaven.com/agents/reviews/Sea-Haven-Industries/seahaven-external-dev-baseline/8)

This repo is archived. You cannot comment on pull requests.

No reviewers