Fix dependency-review for commits in main (#6904)

aws · Oct 26, 2023 · 171f3f5 · 171f3f5
1 parent 2f211b2
commit 171f3f5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/vulnerability.yml b/.github/workflows/vulnerability.yml
@@ -22,6 +22,9 @@ jobs:
           show-progress: false
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v3
+        with:
+          base-ref: ${{ github.event.pull_request.base.sha || github.event.before }}
+          head-ref: ${{ github.event.pull_request.head.sha || github.sha }}
   govulncheck:
     runs-on: ubuntu-latest
     steps: