ci: re-pin actions/dependency-review-action back to a release (#13309)

This commit is contained in:
Colin Adler
2024-05-17 11:55:30 -05:00
committed by GitHub
parent f23d4802b5
commit f176ff532f

View File

@ -916,8 +916,7 @@ jobs:
uses: actions/checkout@v4
- name: "Dependency Review"
id: review
# TODO: Replace this with the latest release once https://github.com/actions/dependency-review-action/pull/761 is merged.
uses: actions/dependency-review-action@82ab8f69c78827a746628706b5d2c3f87231fd4c
uses: actions/dependency-review-action@v4.3.2
with:
allow-licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, ISC, MIT, MIT-0, MPL-2.0
allow-dependencies-licenses: "pkg:golang/github.com/pelletier/go-toml/v2"