Create dependency-review.yml (#36)

.github/workflows/dependency-review.yml

@@ -0,0 +1,19 @@
+name: 'Dependency review'
+on:
+ pull_request:
+ branches: [ "main" ]
+
+permissions:
+ contents: read
+ pull-requests: write
+
+jobs:
+ dependency-review:
+ runs-on: ubuntu-latest
+ steps:
+ - name: 'Checkout repository'
+ uses: actions/checkout@v4
+ - name: 'Dependency Review'
+ uses: actions/dependency-review-action@v4
+ with:
+ comment-summary-in-pr: always