pr.yml 1.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950
  1. on:
  2. pull_request:
  3. branches:
  4. - "*"
  5. workflow_dispatch: {}
  6. name: "Pull Request"
  7. permissions:
  8. contents: read
  9. jobs:
  10. test:
  11. name: "Test"
  12. permissions:
  13. contents: read
  14. security-events: write
  15. uses: ./.github/workflows/part_test.yml
  16. docs:
  17. name: "Docs"
  18. uses: ./.github/workflows/part_docs.yml
  19. dependabot:
  20. name: "Dependabot"
  21. if: ${{ github.actor == 'dependabot[bot]'}}
  22. permissions:
  23. pull-requests: write
  24. contents: write
  25. uses: ./.github/workflows/part_dependabot.yml
  26. dependency-review:
  27. name: Dependency Review
  28. runs-on: ubuntu-latest
  29. steps:
  30. - name: Harden Runner
  31. uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
  32. with:
  33. egress-policy: audit
  34. - name: 'Checkout Repository'
  35. uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
  36. - name: 'Dependency Review'
  37. uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0