Skip to content

Commit c147ea0

Browse files
authored
ci: add scan deps workflow
Used for allowing dependabot to retrieve CVEs and report them in security tab
1 parent 0defedb commit c147ea0

1 file changed

Lines changed: 25 additions & 0 deletions

File tree

.github/workflows/scan-deps.yml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Scan Dependencies
2+
3+
on:
4+
push:
5+
branches: [ "master" ]
6+
7+
jobs:
8+
dependency-submission:
9+
10+
runs-on: ubuntu-latest
11+
permissions:
12+
contents: write
13+
14+
steps:
15+
- uses: actions/checkout@v5
16+
- name: Set up JDK 22
17+
uses: actions/setup-java@v5
18+
with:
19+
java-version: '22'
20+
distribution: 'temurin'
21+
22+
# Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies.
23+
# See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md
24+
- name: Generate and submit dependency graph
25+
uses: gradle/actions/dependency-submission@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2

0 commit comments

Comments
 (0)