Merge pull request #777 from alphagov/PP-12687-dependency-checker

PP-12687: Add dependency review checks
alphagov · Nov 5, 2024 · 090ec7d · 090ec7d
2 parents 62cac41 + d2a0071
commit 090ec7d
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 3 deletions.
diff --git a/.github/workflows/run-tests.yml → .github/workflows/_run-tests.yml b/.github/workflows/run-tests.yml → .github/workflows/_run-tests.yml
@@ -1,15 +1,22 @@
 name: Run tests and static build
 
 on:
-  pull_request:
   workflow_call:
   workflow_dispatch:
 
 permissions:
   contents: read
 
 jobs:
-  run-tests:
+  detect-secrets:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Git checkout
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
+      - name: Detect secrets
+        uses: alphagov/pay-ci/actions/detect-secrets@master
+
+  tests:
     name: Unit tests and static build
     runs-on: ubuntu-latest
     steps:

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -0,0 +1,15 @@
+name: PR
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    uses: ./.github/workflows/_run-tests.yml
+
+  dependency-review:
+    name: Dependency Review scan
+    uses: alphagov/pay-ci/.github/workflows/_run-dependency-review.yml@master
diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml
@@ -18,7 +18,7 @@ concurrency:
 jobs:
   run-tests:
     name: Unit tests and static build
-    uses: ./.github/workflows/run-tests.yml
+    uses: ./.github/workflows/_run-tests.yml
   static:
     name:  Deploy and release Pay product pages
     needs: run-tests