pr.yml 1.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. on:
  2. pull_request:
  3. branches:
  4. - "*"
  5. workflow_dispatch: {}
  6. name: "Pull Request"
  7. permissions:
  8. contents: read
  9. jobs:
  10. test:
  11. name: "Test"
  12. permissions:
  13. contents: read
  14. security-events: write
  15. uses: ./.github/workflows/part_test.yml
  16. docs:
  17. name: "Docs"
  18. uses: ./.github/workflows/part_docs.yml
  19. dependabot:
  20. name: "Dependabot"
  21. if: ${{ github.actor == 'dependabot[bot]'}}
  22. permissions:
  23. pull-requests: write
  24. contents: write
  25. uses: ./.github/workflows/part_dependabot.yml
  26. dependency-review:
  27. name: Dependency Review
  28. runs-on: ubuntu-latest
  29. steps:
  30. - name: Harden Runner
  31. uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
  32. with:
  33. egress-policy: audit
  34. - name: 'Checkout Repository'
  35. uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
  36. - name: 'Dependency Review'
  37. uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4