Skip to content

CI: enable Dependency graph so the dependency-review check can pass #689

Description

@ohdearquant

Summary

The dependency-review (PRs only) check fails on every PR with:

##[error]Dependency review is not supported on this repository. Please ensure that Dependency graph is enabled, see https://github.com/ruvnet/RuVector/settings/security_analysis

This is a repository setting, not a code issue, so it can't be fixed by a PR. It needs Settings → Code security & analysis → Dependency graph enabled. Once that's on, the actions/dependency-review-action@v4 step can run and the check goes green (it's configured with fail-on-severity: moderate).

Why it matters

Because the job fails on every PR regardless of the diff, green CI is unreachable for any contribution, which muddies the signal on whether a given PR is actually clean.

Rest of the red CI (handled via PRs)

Happy to help get the rest of CI green — the code-side reds are being addressed separately:

Only the Dependency graph toggle above needs a maintainer action.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions