From 4e5960660ecfd830829d446e749c5be20e1dbc26 Mon Sep 17 00:00:00 2001 From: Kyle Carberry Date: Mon, 29 Apr 2024 20:51:01 -0400 Subject: [PATCH] chore: fix dependency review action (#13105) See https://github.com/actions/dependency-review-action/issues/757 --- .github/workflows/ci.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 728063e433..c279360cea 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -909,7 +909,8 @@ jobs: uses: actions/checkout@v4 - name: "Dependency Review" id: review - uses: actions/dependency-review-action@v4 + # TODO: Replace this with the latest release once https://github.com/actions/dependency-review-action/pull/761 is merged. + uses: actions/dependency-review-action@49fbbe0acb033b7824f26d00b005d7d598d76301 with: allow-licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, ISC, MIT, MIT-0, MPL-2.0 allow-dependencies-licenses: "pkg:golang/github.com/pelletier/go-toml/v2"