From cb8c3b9285e83053e7e2a3bda7c1d508d380d42e Mon Sep 17 00:00:00 2001
From: Matthew T <20070360+mdtro@users.noreply.github.com>
Date: Thu, 17 Oct 2024 13:05:54 -0500
Subject: [PATCH] support dependency review config (#144)

---
 .github/workflows/dependency-review.yml | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 4635e5a..f6e24b7 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -11,8 +11,23 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
+      - name: 'Check Config'
+        id: check_config
+        run: |
+          if [ -f .github/dependency-review-config.yml ]; then
+            echo "dependency_review_config_exists=true" >> $GITHUB_ENV
+          else
+            echo "dependency_review_config_exists=false" >> $GITHUB_ENV
+          fi
+
+      - name: Dependency Review (local config)
+        if: env.dependency_review_config_exists == 'true'
+        uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
+        with:
+          config-file: './.github/dependency-review-config.yml'
+
       - name: Dependency Review
+        if: env.dependency_review_config_exists == 'false'
         uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
         with:
-          # Possible values: "critical", "high", "moderate", "low"
-          fail-on-severity: high 
+          fail-on-severity: high