From 277f197a71da6e99cdb98f11fc5a3587fd044ae4 Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Fri, 3 Jul 2026 18:26:35 +0545 Subject: [PATCH] fix(.github/workflows): change fail-on-scopes to runtime Update CI to enforce runtime dependency reviews, improving coverage of actual runtime packages. --- .github/workflows/dependency-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 7957bb4..98198a6 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -19,7 +19,7 @@ jobs: uses: actions/dependency-review-action@v5 with: fail-on-severity: high - fail-on-scopes: direct + fail-on-scopes: runtime license-check: true # Project is GPL-3.0-or-later; flag licenses that would taint it. deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later, SSPL-1.0, BUSL-1.1