File tree 1 file changed +10
-2
lines changed
1 file changed +10
-2
lines changed Original file line number Diff line number Diff line change
1
+ # Workflow: Dependency Graph Submission and Vulnerability Reporting
2
+ #
3
+ # Trigger: This workflow runs on every merge to the main branch.
4
+ #
5
+ # Purpose: It generates and submits a dependency graph to the GitHub Dependency Submission API. The graph is used to
6
+ # trigger Dependabot Alerts for vulnerable dependencies, and to populate the Dependency Graph insights view in GitHub.
7
+ #
8
+ # Excludes:
9
+ # - Test-only dependencies
10
+
1
11
name : Dependency Submission
2
12
3
13
on :
21
31
- name : Generate and submit dependency graph
22
32
uses : gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808 # pin@v4
23
33
with :
24
- gradle-version : 7.5.1
25
34
dependency-graph-exclude-configurations : ' .*[Tt]est(Compile|Runtime)Classpath'
26
- dependency-graph-continue-on-failure : true
27
35
build-scan-publish : true
28
36
build-scan-terms-of-use-url : " https://gralde.com/help/legal-terms-of-use"
29
37
build-scan-terms-of-use-agree : " yes"
You can’t perform that action at this time.
0 commit comments