Read-only mirrors. Development, issues and pull requests are on GitHub.

summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorLeitwolf112026-10-10 20:42:34 +0300
committerLeitwolf112026-10-10 20:42:34 +0300
commit5aee5ccf129c404ae8b7805ee03247ee981298c6 (patch)
tree5c4a2a737f810f7a2e49992f7c2d863ffc7222a8
parent24edc8c26c1985e62405dc929ab69f63deabe019 (diff)
downloadwebsite-5aee5ccf129c404ae8b7805ee03247ee981298c6.tar.gz
Drop the second Dependency Review workflow
ci.yml already has a dependency-review job, which I missed. The workflow this branch added ran the same review a second time on every pull request, so it is removed; the existing job stays as it is.
-rw-r--r--.github/workflows/dependency-review.yml34
1 files changed, 0 insertions, 34 deletions
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
deleted file mode 100644
index de6e480..0000000
--- a/.github/workflows/dependency-review.yml
+++ /dev/null
@@ -1,34 +0,0 @@
-# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
-# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
-
-name: Dependency Review
-
-# Looks at the dependencies a pull request adds or changes, and fails when
-# one of them has a known vulnerability of high severity or worse.
-# Dependabot watches what is already there; this holds what comes in.
-
-on:
- pull_request:
-
-permissions: {}
-
-concurrency:
- group: dependency-review-${{ github.ref }}
- cancel-in-progress: true
-
-jobs:
- review:
- name: Dependency review
- runs-on: ubuntu-latest
- timeout-minutes: 10
- permissions:
- contents: read
- steps:
- - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
- with:
- persist-credentials: false
-
- - name: Review the dependency changes
- uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
- with:
- fail-on-severity: high