add dependency checks

Author: sthulb

.github/dependency-review-config.yml

@@ -0,0 +1,33 @@
+allow_licenses:
+  - 'Apache-1.1'
+  - 'Apache-2.0'
+  - 'MIT'
+  - 'MIT-0'
+  - 'MIT-Click'
+  - 'MIT-CMU'
+  - 'MIT-enna'
+  - 'MIT-feh'
+  - 'MIT-Festival'
+  - 'MIT-Khronos-old'
+  - 'MIT-Modern-Variant'
+  - 'MIT-open-group'
+  - 'MIT-testregex'
+  - 'MIT-Wu'
+  - 'BSD-1-Clause'
+  - 'BSD-2-Clause'
+  - 'BSD-2-Clause-first-lines'
+  - 'BSD-2-Clause-Views'
+  - 'BSD-3-Clause'
+  - 'BSD-3-Clause-acpica'
+  - 'BSD-3-Clause-Attribution'
+  - 'BSD-3-Clause-Clear'
+  - 'BSD-3-Clause-flex'
+  - 'BSD-3-Clause-HP'
+  - 'BSD-3-Clause-LBNL'
+  - 'BSD-3-Clause-Modification'
+  - 'BSD-3-Clause-No-Military-License'
+  - 'BSD-3-Clause-No-Nuclear-License'
+  - 'BSD-3-Clause-No-Nuclear-License-2014'
+  - 'BSD-3-Clause-No-Nuclear-Warranty'
+  - 'BSD-3-Clause-Open-MPI'
+comment-summary-in-pr: on-failure

.github/workflows/security-dependencies-check.yml

@@ -0,0 +1,25 @@
+on:
+  pull_request: 
+  workflow_dispatch:
+  schedule:
+    - cron: '0 12 * * *' # Run daily at 12:00 UTC
+
+name: Verify Dependencies
+run-name: Verify Dependencies – ${{ github.event_name }}
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - name: 'Verify Contents'
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # 4.5.0
+        with:
+          config-file: ./.github/dependency-review-config.yml
+