File tree Expand file tree Collapse file tree 1 file changed +10
-2
lines changed Expand file tree Collapse file tree 1 file changed +10
-2
lines changed Original file line number Diff line number Diff line change 1+ #  Workflow: Dependency Graph Submission and Vulnerability Reporting
2+ # 
3+ #  Trigger: This workflow runs on every merge to the main branch.
4+ # 
5+ #  Purpose: It generates and submits a dependency graph to the GitHub Dependency Submission API. The graph is used to
6+ #  trigger Dependabot Alerts for vulnerable dependencies, and to populate the Dependency Graph insights view in GitHub.
7+ # 
8+ #  Excludes:
9+ #  - Test-only dependencies
10+ 
111name : Dependency Submission 
212
313on :
2131      - name : Generate and submit dependency graph 
2232        uses : gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808  #  pin@v4
2333        with :
24-           gradle-version : 7.5.1 
2534          dependency-graph-exclude-configurations : ' .*[Tt]est(Compile|Runtime)Classpath' 
26-           dependency-graph-continue-on-failure : true 
2735          build-scan-publish : true 
2836          build-scan-terms-of-use-url : " https://gralde.com/help/legal-terms-of-use" 
2937          build-scan-terms-of-use-agree : " yes" 
 
 
   
 
     
   
   
          
    
    
     
    
      
     
     
    You can’t perform that action at this time.
  
 
    
  
    
      
        
     
       
      
     
   
 
    
    
  
 
  
 
     
    
0 commit comments