Enable Dependency Review
Last updated
Last updated
The Dependency Review Workflow enforces dependency reviews on your pull requests. The action scans vulnerable versions of dependencies introduced by package version changes in pull requests and warns you about the associated security vulnerabilities. This gives you better visibility of what's changing in a pull request and helps prevent vulnerabilities from being added to your repository.