bcgov / bcgov/wps

Add dependency review action to CI pipeline

Open
#1,872 0 comments 0 reactions 0 assignees View on GitHub
4Refinement Task
Dominant language
Python
Stars
65
Forks
11
Avg merge
21h 25m
Merged PRs (30d)
70

Description

**Describe the task**
Dependabot only tells us our security vulns in our current codebase, this action prevents introducing them as a code review action.

**Acceptance Criteria**
- [ ] Update our CI pipeline to run the dependency review action

**Additional context**
- Add any other context about the task here.
- Or here

Contributor guide

Open the contributing guide

Research direction

Start by inspecting the repository's CI workflow files to find the pipeline that should run on code review. Add the dependency review action there and verify that the workflow runs successfully for dependency changes, satisfying the acceptance criterion.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.