BitSight Community MCP Server

--- name: 'Dependency review' "on": pull_request: workflow_dispatch: permissions: contents: read jobs: dependency-review: name: Dependency Review runs-on: ubuntu-latest permissions: pull-requests: write # Required for using the `comment-summary-in-pr` option id-token: write # for step-security/harden-runner to fetch OIDC token steps: - name: Harden the runner (Audit all outbound calls) uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 with: egress-policy: audit - name: Checkout repository uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Dependency Review uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 with: comment-summary-in-pr: ${{ github.event_name == 'pull_request' && 'always' || 'never' }} fail-on-severity: moderate retry-on-snapshot-warnings: true