name: Dependency Review
on:
  pull_request:
jobs:
  review:
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@7a8243248b4dfcc42cbd238ab98e6d35e705d6e2 # main
    with:
      # GHSA-3jxr-9vmj-r5cp (brace-expansion ReDoS): bundled transitive inside
      # aws-cdk-lib (inBundle, not overridable via lockfile); adjudicated in
      # .security-review/suppressions.json. Remove when aws-cdk-lib bundles >=5.0.8.
      allow-ghsas: GHSA-3jxr-9vmj-r5cp