Create dependency-review.yml - Githubissues

10up / simple-page-ordering

Order your pages and other hierarchical post types with simple drag and drop right from the standard page list.

https://wordpress.org/plugins/simple-page-ordering/

GNU General Public License v2.0

149 stars 23 forks source link

Create dependency-review.yml #86

Closed jeffpaul closed 2 years ago

jeffpaul commented 2 years ago

Description of the Change

Adds a dependency review action that scans all PRs for introducing insecure dependencies and will block merge of those PRs until the insecure item is resolved. Will help protect us from accidentally introducing insecure code into our projects. More details on this official GitHub Action here: https://github.blog/changelog/2022-04-06-github-action-for-dependency-review-enforcement/.

Alternate Designs

Don't have this and just... 🤞🏼?

Possible Drawbacks

none identified

Verification Process

Already verified as working in https://github.com/10up/distributor/pull/869, merely replicating that change in this repo.

Checklist:

[x] I have read the CONTRIBUTING document.
[x] My code follows the code style of this project.
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[ ] I have added tests to cover my change.
[ ] All new and existing tests passed.

Changelog Entry

Added - Dependency security scanning.

Credits

Props @jeffpaul.