From bcaec95451dc1795600bde660eb3c7d7850fbb8f Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 19:48:38 +0900 Subject: [PATCH] ci(workflows): use central reusable dependency-review.yml Replace this repo's hand-written dependency-review.yml with a thin caller into ContextualWisdomLab/.github's new workflow_call workflow (fail-on- severity: moderate, continue-on-error: true preserved exactly), and add the cancel-in-progress concurrency group this workflow previously lacked. See ContextualWisdomLab/.github#1724 (the central workflow) and docs/adr/0024-dependency-review-reusable-workflow-consolidation.md / docs/doctoring/dependency-review-reusable-workflow-consolidation.md there for the full audit and design rationale. Co-Authored-By: Claude Sonnet 5 --- .github/workflows/dependency-review.yml | 25 +++++++------------------ 1 file changed, 7 insertions(+), 18 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 34a248c6..810a93cd 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -4,24 +4,13 @@ on: pull_request: branches: [main, developmental] -permissions: - contents: read - pull-requests: read +concurrency: + group: dependency-review-${{ github.event.pull_request.number || github.ref }} + cancel-in-progress: true jobs: dependency-review: - name: dependency-review - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v4 - - name: Dependency review - continue-on-error: true - uses: actions/dependency-review-action@v4 - with: - fail-on-severity: moderate - - name: Dependency review availability note - if: always() - run: | - echo "Dependency Review requires GitHub Dependency Graph to be enabled for this repository." - echo "OSV-Scanner remains the blocking dependency vulnerability gate." + uses: ContextualWisdomLab/.github/.github/workflows/dependency-review.yml@main + with: + fail_on_severity: moderate + continue_on_error: true