Skip to content

Commit ce901cc

Browse files
add notes to dependency-submission workflow
1 parent 5b9b5bf commit ce901cc

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

.github/workflows/dependency-submission.yml

+10-2
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,13 @@
1+
# Workflow: Dependency Graph Submission and Vulnerability Reporting
2+
#
3+
# Trigger: This workflow runs on every merge to the main branch.
4+
#
5+
# Purpose: It generates and submits a dependency graph to the GitHub Dependency Submission API. The graph is used to
6+
# trigger Dependabot Alerts for vulnerable dependencies, and to populate the Dependency Graph insights view in GitHub.
7+
#
8+
# Excludes:
9+
# - Test-only dependencies
10+
111
name: Dependency Submission
212

313
on:
@@ -21,9 +31,7 @@ jobs:
2131
- name: Generate and submit dependency graph
2232
uses: gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808 # pin@v4
2333
with:
24-
gradle-version: 7.5.1
2534
dependency-graph-exclude-configurations: '.*[Tt]est(Compile|Runtime)Classpath'
26-
dependency-graph-continue-on-failure: true
2735
build-scan-publish: true
2836
build-scan-terms-of-use-url: "https://gralde.com/help/legal-terms-of-use"
2937
build-scan-terms-of-use-agree: "yes"

0 commit comments

Comments
 (0)