[#patch] deps review only on PRs (#261)

Signed-off-by: Edoardo Rosa <6991986+notdodo@users.noreply.github.com>

Author: notdodo

.github/workflows/sast.yml

@@ -28,6 +28,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: "Dependency Review"
+        if: github.event_name == 'pull_request'
         uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
         with:
           fail-on-severity: moderate