Skip to content

Bump actions/checkout from 4.1.2 to 4.1.5 #579

Bump actions/checkout from 4.1.2 to 4.1.5

Bump actions/checkout from 4.1.2 to 4.1.5 #579

name: "Dependency Review"
on:
pull_request:
branches:
- main
concurrency:
group: ${{ github.ref_name }}-deps-review
cancel-in-progress: true
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-22.04
permissions:
contents: read # for actions/checkout
pull-requests: write # for actions/dependency-review-action to post comments
steps:
- name: "Checkout Repository"
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: "Dependency Review"
uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5
with:
config-file: "nginxinc/k8s-common/dependency-review-config.yml@main"