Add dependency review action to CI pipeline
Open
4Refinement
Task
- Dominant language
- Python
- Stars
- 65
- Forks
- 11
- Avg merge
- 21h 25m
- Merged PRs (30d)
- 70
Description
**Describe the task**
Dependabot only tells us our security vulns in our current codebase, this action prevents introducing them as a code review action.
**Acceptance Criteria**
- [ ] Update our CI pipeline to run the dependency review action
**Additional context**
- Add any other context about the task here.
- Or here
Contributor guide
Research direction
Start by inspecting the repository's CI workflow files to find the pipeline that should run on code review. Add the dependency review action there and verify that the workflow runs successfully for dependency changes, satisfying the acceptance criterion.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100