mirror of
https://github.com/Sea-Haven-Industries/syslog-server.git
synced 2026-09-30 04:13:14 +00:00
15 lines
521 B
YAML
15 lines
521 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
|
|
with:
|
|
# GHSA-3jxr-9vmj-r5cp (brace-expansion ReDoS): bundled transitive inside
|
|
# aws-cdk-lib (inBundle, not overridable via lockfile); adjudicated in
|
|
# .security-review/suppressions.json. Remove when aws-cdk-lib bundles >=5.0.8.
|
|
allow-ghsas: GHSA-3jxr-9vmj-r5cp
|