syslog-server/.github/workflows/dependency-review.yml
2026-07-28 17:56:13 -04:00

11 lines
489 B
YAML

name: Dependency Review
on:
pull_request:
jobs:
review:
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
with:
# GHSA-3jxr-9vmj-r5cp (brace-expansion ReDoS): bundled transitive inside
# aws-cdk-lib (inBundle, not overridable via lockfile); adjudicated in
# .security-review/suppressions.json. Remove when aws-cdk-lib bundles >=5.0.8.
allow-ghsas: GHSA-3jxr-9vmj-r5cp