add: dependency-review (#266)

apache · Sep 20, 2023 · b1ad860 · b1ad860
1 parent fdb4621
commit b1ad860
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -3,8 +3,6 @@
 name: "CodeQL"
 
 on:
-  push:
-    branches: [ master, release-*, v0.* ]
   pull_request:
     # The branches below must be a subset of the branches above, now enable it in all PR
     # branches: [ master ]
@@ -57,3 +55,12 @@ jobs:
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2
+
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v3
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v3
+