actions/.github/workflows/dependency-review.yaml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Dependency Review

# Required permission on the caller workflow
# permissions:
#   contents: read

on:
  workflow_call:
    inputs:
      base_ref:
        description: 'The base ref for the dependency review'
        required: false
        type: string
        default: 'next'
      head_ref:
        description: 'The head ref for the dependency review'
        required: false
        type: string
        default: 'next'

jobs:
  main:
    name: Dependency Review
    runs-on: ubuntu-latest

    steps:
      - name: ⤵️ Checkout repository
        uses: actions/checkout@v5

      - name: 🚀 Dependency Review
        uses: actions/dependency-review-action@v4
        with:
          base-ref: ${{ inputs.base_ref }}
          head-ref: ${{ inputs.head_ref }}