Skip to content

Bump actions/dependency-review-action from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to 355d25e5a70d2a2b28ef092a65254455882ec6eb #182

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from

Bump actions/dependency-review-action

b6e908c
Select commit
Loading
Failed to load commit list.
Closed

Bump actions/dependency-review-action from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to 355d25e5a70d2a2b28ef092a65254455882ec6eb #182

Bump actions/dependency-review-action
b6e908c
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Nov 5, 2025 in 11s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers

Details

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

View more details on StepSecurity Actions Security