From dc83ac55bd58a0531b71b851ac0a7d217bfc1f83 Mon Sep 17 00:00:00 2001 From: Ned Batchelder Date: Tue, 14 Mar 2023 07:37:41 -0400 Subject: [PATCH] build: run dependency check on pushes, for more action uniformity --- .github/workflows/dependency-review.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 34b14c395..d10f16226 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -4,8 +4,15 @@ # # Source repository: https://github.com/actions/dependency-review-action # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement + name: 'Dependency Review' -on: [pull_request] +on: + push: + branches: + - master + - nedbat/* + pull_request: + workflow_dispatch: permissions: contents: read @@ -18,3 +25,6 @@ jobs: uses: actions/checkout@v3 - name: 'Dependency Review' uses: actions/dependency-review-action@v3 + with: + base-ref: ${{ github.event.pull_request.base.ref || 'master' }} + head-ref: ${{ github.event.pull_request.head.ref || github.ref }}