Problem
Resolve dependency-driven security challenges
의존성에 의한 보안 문제를 해결
Proposed Solution
Add workflows/security.yml
Enable 'Advanced Security -> Dependency graph'
Alternatives Considered
No response
Additional Context
name: Security
on:
pull_request:
branches:
- main
permissions:
contents: read
security-events: write
jobs:
dependency-review:
name: Dependency Review
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v4
- name: Review Dependencies
uses: actions/dependency-review-action@v4
Problem
Resolve dependency-driven security challenges
의존성에 의한 보안 문제를 해결
Proposed Solution
Add
workflows/security.ymlEnable 'Advanced Security -> Dependency graph'
Alternatives Considered
No response
Additional Context