Create dependency-review.yml - Githubissues

10up / ads-txt

Ads.txt Manager for WordPress: Manage your ads.txt and app-ads.txt files in the WordPress dashboard

https://wordpress.org/plugins/ads-txt/

GNU General Public License v2.0

57 stars 25 forks source link

Create dependency-review.yml #97

Closed jeffpaul closed 2 years ago

jeffpaul commented 2 years ago

Description of the Change

Adds a dependency review action that scans all PRs for introducing insecure dependencies and will block merge of those PRs until the insecure item is resolved. Will help protect us from accidentally introducing insecure code into our projects. More details on this official GitHub Action here: https://github.blog/changelog/2022-04-06-github-action-for-dependency-review-enforcement/.

Alternate Designs

Don't have this and just... 🤞🏼?

Possible Drawbacks

none identified

Verification Process

Already verified as working in https://github.com/10up/distributor/pull/869, merely replicating that change in this repo.

Checklist:

[x] I have read the CONTRIBUTING document.
[x] My code follows the code style of this project.
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[ ] I have added tests to cover my change.
[ ] All new and existing tests passed.

Changelog Entry

Added - Dependency security scanning.

Credits

Props @jeffpaul.