Merge pull request #57 from cloudcome/feat/v0.x

Feat/v0.x

Author: cloudcome

.github/workflows/code-review.yml

@@ -2,11 +2,20 @@ name: code review
 
 on:
   push:
+    branches:
+      - master
+      - v*.x
   pull_request:
+    branches:
+      - master
+      - v*.x
   schedule:
     # 每天凌晨 3 点（UTC）
     - cron: '0 3 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   code-review:
     runs-on: ubuntu-latest
@@ -15,6 +24,7 @@ jobs:
           sudo rm /etc/localtime
           sudo ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
       - uses: actions/checkout@v3
+      - uses: actions/dependency-review-action@v3
       - uses: actions/setup-node@v3
         with:
           node-version: 18