Skip to content

Commit 3679b7d

Browse files
committed
Use cisagov/action-job-preamble instead of separate actions
Use cisagov/action-job-preamble instead of crazy-max/ghaction-github-status and crazy-max/ghaction-dump-context directly. Also disable permissions monitoring since it is poorly implemented and has been causing a lot of problems due to hogging or leaking memory.
1 parent 494e116 commit 3679b7d

File tree

1 file changed

+11
-7
lines changed

1 file changed

+11
-7
lines changed

.github/workflows/dependency-review.yml

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
name: Dependency review
33

4-
on:
4+
on: # yamllint disable-line rule:truthy
55
merge_group:
66
types:
77
- checks_requested
@@ -27,6 +27,12 @@ jobs:
2727
- name: Apply standard cisagov job preamble
2828
uses: cisagov/action-job-preamble@v1
2929
with:
30+
check_github_status: "true"
31+
# This functionality is poorly implemented and has been
32+
# causing a lot of problems due to the MITM implementation
33+
# hogging or leaking memory, so we disable it for now.
34+
monitor_permissions: "false"
35+
output_workflow_context: "true"
3036
# Use a variable to specify the permissions monitoring
3137
# configuration. By default this will yield the
3238
# configuration stored in the cisagov organization-level
@@ -41,12 +47,6 @@ jobs:
4147
# monitoring configuration *does not* require you to modify
4248
# this workflow.
4349
permissions_monitoring_config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }}
44-
- id: github-status
45-
name: Check GitHub status
46-
uses: crazy-max/ghaction-github-status@v4
47-
- id: dump-context
48-
name: Dump context
49-
uses: crazy-max/ghaction-dump-context@v2
5050
dependency-review:
5151
name: Dependency review
5252
needs:
@@ -59,6 +59,10 @@ jobs:
5959
- name: Apply standard cisagov job preamble
6060
uses: cisagov/action-job-preamble@v1
6161
with:
62+
# This functionality is poorly implemented and has been
63+
# causing a lot of problems due to the MITM implementation
64+
# hogging or leaking memory, so we disable it for now.
65+
monitor_permissions: "false"
6266
# Use a variable to specify the permissions monitoring
6367
# configuration. By default this will yield the
6468
# configuration stored in the cisagov organization-level

0 commit comments

Comments
 (0)