From b902c93e3d9091f138887e8fcaa5890dd8f87cf6 Mon Sep 17 00:00:00 2001
From: David Burg <12040431+daviburg@users.noreply.github.com>
Date: Wed, 17 Jun 2026 15:21:37 -0700
Subject: [PATCH] ci: add dependency review workflow

---
 .github/workflows/dependency-review.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/workflows/dependency-review.yml

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
new file mode 100644
index 0000000..b73ed7b
--- /dev/null
+++ b/.github/workflows/dependency-review.yml
@@ -0,0 +1,18 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Review dependency changes
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
+        with:
+          fail-on-severity: high
\ No newline at end of file