Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update docs for dependency review #540

Merged
merged 2 commits into from
Jan 30, 2025
Merged

Update docs for dependency review #540

merged 2 commits into from
Jan 30, 2025

Conversation

bigdaz
Copy link
Member

@bigdaz bigdaz commented Jan 30, 2025

Due to an issue with dependency-review-action, the setup described in the documentation can result in duplicate dependencies being added to the dependency graph.

To avoid this, we now recommend using a common dependency-submission workflow for both pushes to main and pull requests. The dependency-review workflow runs on any pull_request but will wait for the dependency-submission to complete.

This setup works for both the standard setup, and for the advanced setup for pull requests from repository forks.

@bigdaz bigdaz requested a review from a team January 30, 2025 00:25
Copy link
Contributor

Job Summary for Gradle

Demo adding Build Scan® comment to PR :: successful-build-with-always-comment
Gradle Root Project Requested Tasks Gradle Version Build Outcome Build Scan®
kotlin-dsl build 8.12.1 Build Scan published

@bigdaz bigdaz merged commit 986922f into main Jan 30, 2025
125 checks passed
@bigdaz bigdaz deleted the dd/dependency-review-docs branch January 30, 2025 15:35
@bigdaz bigdaz added this to the v4.3.0 milestone Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants