Make retry-on-snapshot-warnings opt-in via workflow_call inputs

[Copilot]

The hardcoded retry-on-snapshot-warnings: true was causing a 120s spin-wait on every run, including repos (Python, JS, etc.) that never submit dependency snapshots.

Changes

• Removed hardcoded retry-on-snapshot-warnings: true
• Added two optional workflow_call inputs passed through to actions/dependency-review-action:

Input	Type	Default	Description
retry-on-snapshot-warnings	boolean	false	Enable polling every 10s for dependency submission actions
retry-on-snapshot-warnings-timeout	number	120	Max wait time in seconds

Usage

Callers opt in explicitly:

jobs:
  dependency-review:
    uses: advanced-security/reusable-workflows/.github/workflows/dependency-review.yml@main
    with:
      retry-on-snapshot-warnings: true
      retry-on-snapshot-warnings-timeout: 60
    secrets: inherit

Fallback values (|| false / || 120) in the step handle the pull_request trigger path where the inputs context is unavailable.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.