Add security CI workflows (#248)
Some checks are pending
CodeQL / Analyze (actions) (push) Waiting to run

* Add security CI workflows

* Remove duplicate Python CodeQL workflow
This commit is contained in:
Bukely_ 2026-04-25 00:46:01 +08:00 committed by GitHub
parent 40073375ff
commit a51d97f63c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 56 additions and 0 deletions

22
.github/workflows/dependency-review.yml vendored Normal file
View file

@ -0,0 +1,22 @@
name: Dependency Review
on:
pull_request:
branches: [main]
permissions:
contents: read
jobs:
dependency-review:
name: Dependency Review
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Checkout repository
uses: actions/checkout@v6
- name: Dependency Review
uses: actions/dependency-review-action@v4
with:
fail-on-severity: moderate