Merge pull request #48 from userback/mark/gh-actions-pr-ci

Enable PR builds in GH actions

Author: lee-userback

.github/workflows/main.yml

@@ -4,10 +4,16 @@ on:
   push:
     branches: [ develop, master ]
   pull_request:
-    branches: [ develop, master ]
 
 jobs:
 
+  # Scan for vulnerable dependencies (npm audit)
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/dependency-review-action@v2
+
   # Ensure basic typescript checks and linting passes
   lint:
     runs-on: ubuntu-latest