Skip to content

Commit ffc357c

Browse files
authored
chore(dependencies): loosen constraints on dependency checker (#26708)
1 parent 3ed70d8 commit ffc357c

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

.github/workflows/dependency-review.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
#
55
# Source repository: https://github.com/actions/dependency-review-action
66
# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
7-
name: 'Dependency Review'
7+
name: "Dependency Review"
88
on: [pull_request]
99

1010
permissions:
@@ -14,12 +14,12 @@ jobs:
1414
dependency-review:
1515
runs-on: ubuntu-latest
1616
steps:
17-
- name: 'Checkout Repository'
17+
- name: "Checkout Repository"
1818
uses: actions/checkout@v3
19-
- name: 'Dependency Review'
19+
- name: "Dependency Review"
2020
uses: actions/dependency-review-action@v2
2121
with:
22-
fail-on-severity: high
22+
fail-on-severity: critical
2323
# compatible/incompatible licenses addressed here: https://www.apache.org/legal/resolved.html
2424
# find SPDX identifiers here: https://spdx.org/licenses/
2525
deny-licenses: MS-LPL, BUSL-1.1, QPL-1.0, Sleepycat, SSPL-1.0, CPOL-1.02, AGPL-3.0, GPL-1.0+, BSD-4-Clause-UC, NPL-1.0, NPL-1.1, JSON

0 commit comments

Comments
 (0)