diff --git a/.github/workflows/dependency_submission.yml b/.github/workflows/dependency_submission.yml new file mode 100644 index 00000000..4da2733b --- /dev/null +++ b/.github/workflows/dependency_submission.yml @@ -0,0 +1,21 @@ +name: "Mix Dependency Submission" + +on: + push: + branches: + - "main" + pull_request: {} + +# The API requires write permission on the repository to submit dependencies +permissions: + contents: write + +jobs: + report_mix_deps: + name: "Report Mix Dependencies" + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: erlef/mix-dependency-submission@v1 + - uses: actions/dependency-review-action@v4 + if: "${{ github.event_name == 'pull_request' }}"