1 parent 6764ff5 commit b350699Copy full SHA for b350699
1 file changed
.github/workflows/dependency-review.yaml
@@ -16,4 +16,7 @@ jobs:
16
uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
17
18
- name: Dependency review
19
- uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4
+ uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5
20
+ with:
21
+ # GHSA-mh99-v99m-4gvg - brace-expansion DoS via unbounded expansion tolerable for the usage in this repo.
22
+ allow-ghsas: "GHSA-mh99-v99m-4gvg"
0 commit comments