chore: only show dependency review comment on failure

philips-software · Nov 7, 2023 · 0fa531b · 0fa531b
1 parent f6c1ec0
commit 0fa531b
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
@@ -70,9 +70,8 @@ jobs:
       - uses: actions/dependency-review-action@9f45b2463b475767b61721ccfef113fef513e6aa # v3.1.1
         if: ${{ github.event_name == 'pull_request' }}
         with:
-          comment-summary-in-pr: always
+          comment-summary-in-pr: on-failure
           fail-on-severity: critical
-          license-check: false
       - name: Sign the image with GitHub OIDC token
         if: ${{ github.event_name != 'merge_group' }}
         # This step uses the GitHub OIDC identity token to provision an ephemeral certificate