CalvinBackup/gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-09-12 07:59:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
331 Commits 345 Branches 0 Tags
dependency-review-action
Commit Graph
2 Commits
Author SHA1 Message Date
Josh FranceandClaude Fable 5 b503f96a22 fix: harden dependency-review workflow from adversarial review 
Fixes applied:
- fail-on-scopes covers development deps, not just runtime (default)
- path-filter to dependency manifests + workflow files (GitHub Actions
  ecosystem changes are also reviewed)
- concurrency cancel-in-progress + 10min timeout, matching version-gate

Auto-fixed by Claude watch-pipeline

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-13 15:18:13 -07:00
Josh FranceandClaude Fable 5 dae910e5d9 ci: add dependency-review-action to scan PR dependency changes 
Fails PRs that introduce dependencies with known high/critical
vulnerabilities; posts a summary comment on failure.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-13 14:57:53 -07:00