Bump actions/dependency-review-action from 2.5.1 to 3.1.5 #6
Triggered via pull request
January 7, 2024 02:06
dependabot[bot]
Status
Startup failure
Total duration
–
Artifacts
–
on.pr.yml
on: pull_request
Checks
/
dependency-review
Matrix: Build (Gradle)
Waiting for pending jobs
Matrix: Build (Maven)
Waiting for pending jobs
Matrix: Checks / Analyze
Waiting for pending jobs
Annotations
1 error
|
Invalid workflow file:
.github/workflows/on.pr.yml#L55
The workflow is not valid. .github/workflows/on.pr.yml (Line: 55, Col: 3): Error calling workflow 'sgammon/modern-java-practices/.github/workflows/checks.codeql.yml@df65fb6ee09e19de9507ec1fe1f697872ca56aff'. The nested job 'analyze' is requesting 'actions: read, security-events: write', but is only allowed 'actions: none, security-events: none'.
|