From 08db8e9bac8fdb9e567be2fd69870cfc90d015b3 Mon Sep 17 00:00:00 2001
From: Paul Abel <128620221+pdabelf5@users.noreply.github.com>
Date: Tue, 4 Jun 2024 13:02:51 +0100
Subject: [PATCH] address bug where base & head ref are not always correct
 (#5681)

---
 .github/workflows/dependency-review.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index ecd789f63a..34b0cb9eb9 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -27,3 +27,5 @@ jobs:
         uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2
         with:
           config-file: "nginxinc/k8s-common/dependency-review-config.yml@main"
+          base-ref: ${{ github.event.pull_request.base.sha || github.event.repository.default_branch }}
+          head-ref: ${{ github.event.pull_request.base.sha || github.ref }}