check for vulnerabilities via GHE action

zalando · Jan 22, 2024 · 041add3 · 041add3
1 parent 80ce728
commit 041add3
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -26,6 +26,12 @@ jobs:
     steps:
     - name: Checkout
       uses: actions/checkout@v3
+    - name: Dependency Review
+      uses: actions/dependency-review-action@v4
+      with:
+        vulnerability-check: true
+        license-check: false
+        comment-summary-in-pr: on-failure
     - name: Set up JDK
       uses: actions/setup-java@v3
       with: