dep-review.yml

---
name: "Dependency Review"
on:
  pull_request:
permissions:
  contents: read
jobs:
  dependency-review:
    runs-on: ubuntu-latest
    steps:
      - name: "Checkout Repository"
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      - name: Dependency Review
        uses: actions/dependency-review-action@4cd9eb2d23752464a87e00499c30d256a59a01b4 # v4
  # critical
  #
  # You can only include one of these two options:
  # `allow-licenses` and `deny-licenses`
  #
  # Possible values: Any `spdx_id` value(s) from
  # https://docs.github.com/en/rest/licenses allow-licenses: GPL-3.0,
  # BSD-3-Clause, MIT
  #
  # Possible values: Any `spdx_id` value(s)
  # from https://docs.github.com/en/rest/licenses deny-licenses: LGPL-2.0,
  # BSD-2-Clause