From 51ed9c40669f1445b534cc37f20018ef64222e08 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Fri, 5 Jun 2026 12:34:12 -0400
Subject: [PATCH] Add dependency-review caller workflow (#6)

* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)

* chore: add .env to .gitignore
---
 .github/workflows/dependency-review.yml | 6 ++++++
 .gitignore                              | 3 +++
 2 files changed, 9 insertions(+)
 create mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 0000000..2c5d47c
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,6 @@
+name: Dependency Review
+on:
+  pull_request:
+jobs:
+  review:
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main
diff --git a/.gitignore b/.gitignore
index cb47b16..2b5c4c9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,6 @@ page_snapshot.html
 # Old manual app bundle and command launcher (replaced by PyInstaller)
 Stampli Bulk Editor.app/
 Stampli Bulk Editor.command
+
+.env
+.env.*