feat(core): add decompose-to-ui-kit + boolean parity verifiers (Phase 1 of #225) #616
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Review | |
| # Dependency Review needs the Dependency graph + (for private repos) GitHub | |
| # Advanced Security. Skipped while the repo is private. | |
| on: | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| jobs: | |
| review: | |
| if: github.event.repository.visibility == 'public' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| - uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4 | |
| with: | |
| fail-on-severity: moderate | |
| deny-licenses: GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later, SSPL-1.0 | |
| # Workflow-only release tooling is not bundled, linked, vendored, or | |
| # distributed with the app. Keep shipped/runtime deps under the deny | |
| # list above, but allow this action so winget automation can run. | |
| allow-dependencies-licenses: pkg:githubactions/vedantmgoyal9/winget-releaser |