feat: add new package and update action

stayko-chalakov · Mar 22, 2024 · 18e4bcb · 18e4bcb
1 parent 0f05d8a
commit 18e4bcb
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 1 deletion.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -2,7 +2,7 @@ name: 'Dependency Review'
 on: [pull_request]
 
 permissions:
-  contents: read
+  pull-requests: write
 
 jobs:
   dependency-review:
@@ -12,3 +12,7 @@ jobs:
         uses: actions/checkout@v4
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4
+        with:
+          fail-on-severity: low
+          deny-licenses: LGPL-2.0, BSD-2-Clause
+          comment-summary-in-pr: on-failure
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -150,6 +150,7 @@
     "helmet": "^4.0.0",
     "html-entities": "^1.3.1",
     "i18n": "^0.11.1",
+    "jose": "^4.15.4",
     "js-yaml": "^3.14.0",
     "jsonwebtoken": "0.4.0",
     "jssha": "^3.1.1",