ci(security): use central dependency review

[seonghobae]

Summary

• replace the repository-local dependency review implementation with the central reusable workflow pinned to an exact commit
• preserve the existing GHSA allowlist and apply the documented low severity policy
• isolate concurrency by workflow, repository, and PR while skipping draft/closed work

Verification

• actionlint .github/workflows/dependency-review.yml
• git diff --check
• uv run pytest -q tests/test_readme.py (11 passed)

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-04T21:58:29.682740Z	230f29d	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Warning

Review limit reached

Next included review available in 16 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: a952155b-261e-4b76-8823-a8c4fcf70723

📥 Commits

Reviewing files that changed from the base of the PR and between e06b1f3 and df39436.

📒 Files selected for processing (10)

• .github/workflows/build-ci-image.yml
• .github/workflows/clusterfuzzlite.yml
• .github/workflows/codeql.yml
• .github/workflows/container-image.yml
• .github/workflows/dependency-review.yml
• .github/workflows/quality-gate.yml
• .github/workflows/scorecards.yml
• .github/workflows/tests.yml
• tests/test_workflow_runtime_env.py
• tests/test_workflow_security.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 39530f51b3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".