diff options
| author | Leitwolf11 | 2026-10-10 20:42:34 +0300 |
|---|---|---|
| committer | Leitwolf11 | 2026-10-10 20:42:34 +0300 |
| commit | 5aee5ccf129c404ae8b7805ee03247ee981298c6 (patch) | |
| tree | 5c4a2a737f810f7a2e49992f7c2d863ffc7222a8 /.github/workflows | |
| parent | 24edc8c26c1985e62405dc929ab69f63deabe019 (diff) | |
| download | website-5aee5ccf129c404ae8b7805ee03247ee981298c6.tar.gz | |
Drop the second Dependency Review workflow
ci.yml already has a dependency-review job, which I missed. The
workflow this branch added ran the same review a second time on every
pull request, so it is removed; the existing job stays as it is.
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/dependency-review.yml | 34 |
1 files changed, 0 insertions, 34 deletions
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml deleted file mode 100644 index de6e480..0000000 --- a/.github/workflows/dependency-review.yml +++ /dev/null @@ -1,34 +0,0 @@ -# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com> -# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1 - -name: Dependency Review - -# Looks at the dependencies a pull request adds or changes, and fails when -# one of them has a known vulnerability of high severity or worse. -# Dependabot watches what is already there; this holds what comes in. - -on: - pull_request: - -permissions: {} - -concurrency: - group: dependency-review-${{ github.ref }} - cancel-in-progress: true - -jobs: - review: - name: Dependency review - runs-on: ubuntu-latest - timeout-minutes: 10 - permissions: - contents: read - steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - with: - persist-credentials: false - - - name: Review the dependency changes - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 - with: - fail-on-severity: high |