Add dependency-review caller workflow (#6)

* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)

* chore: add .env to .gitignore
This commit is contained in:
Adam Moussa 2026-06-05 12:34:12 -04:00 • committed by GitHub
parent d0709a0f50
commit 51ed9c4066
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions

View file

@ -0,0 +1,6 @@
name: Dependency Review
on:
pull_request:
jobs:
review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@main

3
.gitignore vendored
View file

@ -21,3 +21,6 @@ page_snapshot.html
# Old manual app bundle and command launcher (replaced by PyInstaller) # Old manual app bundle and command launcher (replaced by PyInstaller)
Stampli Bulk Editor.app/ Stampli Bulk Editor.app/
Stampli Bulk Editor.command Stampli Bulk Editor.command
.env
.env.*