[ODS-6424] Add dependencies scan action to main-6x #4

	# SPDX-License-Identifier: Apache-2.0
	# Licensed to the Ed-Fi Alliance under one or more agreements.
	# The Ed-Fi Alliance licenses this file to you under the Apache License, Version 2.0.
	# See the LICENSE and NOTICES files in the project root for more information.

	name: Dependency Review Pull request

	on:
	pull_request:
	branches: [main, main-6x]

	permissions: read-all

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	env:
	HEAD_REF: ${{ GITHUB.HEAD_REF }}
	REF_NAME: ${{ GITHUB.REF_NAME }}
	REPOSITORY_DISPATCH_BRANCH: ${{ github.event.client_payload.branch }}

	jobs:
	scan-actions:
	name: Scan Actions
	uses: ed-fi-alliance-oss/ed-fi-actions/.github/workflows/repository-scanner.yml@main

	analyze-code:
	name: Analyze Code Dependencies
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- name: Checkout code
	uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
	- name: Dependency Review ("Dependabot on PR")
	uses: actions/dependency-review-action@9129d7d40b8c12c1ed0f60400d00c92d437adcce # v4.1.3

Provide feedback