name: Dependency Review
on:
  pull_request:
jobs:
  review:
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
    with:
      # GHSA-3jxr-9vmj-r5cp (brace-expansion ReDoS): bundled transitive inside
      # aws-cdk-lib (inBundle, not overridable via lockfile); adjudicated in
      # .security-review/suppressions.json. Remove when aws-cdk-lib bundles >=5.0.8.
      allow-ghsas: GHSA-3jxr-9vmj-r5cp