File tree Expand file tree Collapse file tree 1 file changed +10
-2
lines changed Expand file tree Collapse file tree 1 file changed +10
-2
lines changed Original file line number Diff line number Diff line change 1+ # Workflow: Dependency Graph Submission and Vulnerability Reporting
2+ #
3+ # Trigger: This workflow runs on every merge to the main branch.
4+ #
5+ # Purpose: It generates and submits a dependency graph to the GitHub Dependency Submission API. The graph is used to
6+ # trigger Dependabot Alerts for vulnerable dependencies, and to populate the Dependency Graph insights view in GitHub.
7+ #
8+ # Excludes:
9+ # - Test-only dependencies
10+
111name : Dependency Submission
212
313on :
2131 - name : Generate and submit dependency graph
2232 uses : gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808 # pin@v4
2333 with :
24- gradle-version : 7.5.1
2534 dependency-graph-exclude-configurations : ' .*[Tt]est(Compile|Runtime)Classpath'
26- dependency-graph-continue-on-failure : true
2735 build-scan-publish : true
2836 build-scan-terms-of-use-url : " https://gralde.com/help/legal-terms-of-use"
2937 build-scan-terms-of-use-agree : " yes"
You can’t perform that action at this time.
0 commit comments