basic-depcheck

.github/workflows/maven-library-build.yml

@@ -45,6 +45,13 @@ jobs:
             --batch-mode ${{ inputs.mvn-options }} \
             clean compile ${{ inputs.mvn-args }}
 
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          fail-on-severity: critical
+          vulnerability-check: true
+          comment-summary-in-pr: true
+
   test-coverage:
     runs-on: ubuntu-20.04
     steps:

.github/workflows/maven-service-build.yml

@@ -37,6 +37,13 @@ jobs:
           jdk-distribution: ${{ inputs.java-distribution }}
           mvn-args: ${{ inputs.mvn-args }}
       
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          fail-on-severity: critical
+          vulnerability-check: true
+          comment-summary-in-pr: true
+
   test-coverage:
     runs-on: ubuntu-20.04
     if: ${{ !inputs.ignore-coverage }}

.github/workflows/maven-swag-build.yml

@@ -52,3 +52,10 @@ jobs:
 
       - name: Build client jar
         run: mvn --batch-mode clean package -f pom.xml -P="client"
+      
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          fail-on-severity: critical
+          vulnerability-check: true
+          comment-summary-in-pr: true

.github/workflows/maven-thrift-build.yml

@@ -37,3 +37,10 @@ jobs:
         id: commit_info
       - name: Build package
         run: mvn --batch-mode -Dcommit.number=${{ steps.commit_info.outputs.COMMIT_NUMBER }} -Drevision="1.${{ steps.commit_info.outputs.COMMIT_NUMBER }}-${{ steps.commit_info.outputs.SHA_7 }}" clean compile -f pom.xml
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          fail-on-severity: critical
+          vulnerability-check: true
+          comment-summary-in-pr: true
+