Dependency Submission & Review (Brewfile lock)

.github/workflows/dependencies.yaml

@@ -0,0 +1,26 @@
+name: Dependency
+
+on:
+ push:
+ branches: [ master ]
+ pull_request:
+ branches: [ master ]
+
+permissions: 
+ contents: write # Dependency Graph
+
+jobs:
+ dependency-submission:
+ name: Submission / Review
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+ - name: "Dependency Submission: Brew"
+ uses: advanced-security/brew-dependency-submission-action@25113069cbb9f839378acfd72dadc90692c94a53 # v1.1
+
+ - name: 'Dependency Review'
+ uses: actions/dependency-review-action@fde92acd0840415674c16b39c7d703fc28bc511e # v3.1.2
+ if: github.event_name == 'pull_request'
+ with:
+ comment-summary-in-pr: always