diff --git a/dependabot.yml b/.github/dependabot.yml similarity index 100% rename from dependabot.yml rename to .github/dependabot.yml diff --git a/linters/.golangci.yml b/.github/linters/.golangci.yml similarity index 100% rename from linters/.golangci.yml rename to .github/linters/.golangci.yml diff --git a/linters/.hadolint.yaml b/.github/linters/.hadolint.yaml similarity index 100% rename from linters/.hadolint.yaml rename to .github/linters/.hadolint.yaml diff --git a/linters/.markdown-lint.yml b/.github/linters/.markdown-lint.yml similarity index 100% rename from linters/.markdown-lint.yml rename to .github/linters/.markdown-lint.yml diff --git a/workflows/linter.yml b/.github/workflows/linter.yml similarity index 100% rename from workflows/linter.yml rename to .github/workflows/linter.yml diff --git a/.github/workflows/reusable-dependency-review.yml b/.github/workflows/reusable-dependency-review.yml new file mode 100644 index 0000000..382a4a1 --- /dev/null +++ b/.github/workflows/reusable-dependency-review.yml @@ -0,0 +1,41 @@ +name: 'Dependency Review' + +on: + workflow_call: + inputs: + fail-on-severity: + type: string + description: "Configure the severity level for vulnerability alerting. Possible values: critical, high, moderate, low." + default: "high" + allow-ghsas: + type: string + description: "A comma separated list of any GitHub Advisory IDs that can be skipped during detection. Example: 'GHSA-abcd-1234-5679, GHSA-efgh-1234-5679'" + deny-licenses: + type: string + description: "Add a custom list of licenses you want to block." + base-ref: + type: string + description: "Provide custom git references for the git base when performing the comparison." + head-ref: + type: string + description: "Provide custom git references for the git head when performing the comparison." + +permissions: + contents: read + +jobs: + dependency-review: + name: Scan dependencies for license compliance + runs-on: ubuntu-latest + steps: + - name: "Checkout Repository" + uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 + - name: "Dependency Review" + uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1 + with: + fail-on-severity: ${{ inputs.fail-on-severity }} + allow-ghsas: ${{ inputs.allow-ghsas }} + deny-licenses: ${{ inputs.deny-licenses }} + base-ref: ${{ inputs.base-ref }} + head-ref: ${{ inputs.head-ref }} + diff --git a/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml similarity index 100% rename from workflows/reviewdog.yml rename to .github/workflows/reviewdog.yml diff --git a/workflows/stale.yml b/.github/workflows/stale.yml similarity index 100% rename from workflows/stale.yml rename to .github/workflows/stale.yml