Add dependency review action

.github/workflows/dependency-review.yml

@@ -0,0 +1,21 @@
+name: 'Dependency Review'
+on:
+  pull_request:
+    paths:
+      - '.github/workflows/**'
+      - '.tool-versions'
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v3
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v2
+        with:
+          # https://spdx.org/licenses/
+          allow-licenses: MIT, BSD-3-Clause, BSD-2-Clause, 0BSD, Unlicense, ISC, Apache-2.0