chore: update dependency-review

uselagoon · Dec 21, 2023 · 788b993 · 788b993
1 parent 8fdb2ea
commit 788b993
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 9 deletions.
diff --git a/.github/dependency-review-config.yml → .github/dependency-review-config.yaml b/.github/dependency-review-config.yml → .github/dependency-review-config.yaml
diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
@@ -1,15 +1,16 @@
-name: 'Dependency Review'
+name: dependency review
 on:
-- pull_request
-permissions:
-  contents: read
+  pull_request:
+    branches:
+    - main
+permissions: {}
 jobs:
   dependency-review:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
-    - name: 'Checkout Repository'
-      uses: actions/checkout@v4
-    - name: Dependency Review
-      uses: actions/dependency-review-action@v3
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+    - uses: actions/dependency-review-action@01bc87099ba56df1e897b6874784491ea6309bc4 # v3.1.4
       with:
-        config-file: '.github/dependency-review-config.yml'
+        config-file: .github/dependency-review-config.yaml