diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml deleted file mode 100644 index 2ca9706..0000000 --- a/.github/workflows/dependency-review.yml +++ /dev/null @@ -1,26 +0,0 @@ -name: Dependency Review - -on: - pull_request: - branches: [main] - -permissions: - contents: read - pull-requests: write - -jobs: - dependency-review: - name: Audit dependencies - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v6 - - - name: Dependency Review - uses: actions/dependency-review-action@v4 - with: - fail-on-severity: high - fail-on-scopes: direct - license-check: true - # Project is GPL-3.0-or-later; flag licenses that would taint it. - deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later, SSPL-1.0, BUSL-1.1 - comment-summary-in-pr: always