Merge pull request #2795 from matsim-org/mvn-dep-tree-submit

build: submit dependency graph when deploy-on-pr-merge
matsim-org · Sep 30, 2023 · 0ca901d · 0ca901d
2 parents 1907dca + 6d2a734
commit 0ca901d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/deploy-on-pr-merge.yaml b/.github/workflows/deploy-on-pr-merge.yaml
@@ -43,5 +43,10 @@ jobs:
           MAVEN_USERNAME: ${{ secrets.REPOMATSIM_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.REPOMATSIM_TOKEN }}
 
+      - name: Submit Dependency Graph
+        # Generate a complete dependency graph and submit the graph to the GitHub repository.
+        # The goal is to improve security alerts from dependabot, because dependabot is not able to compute the complete dependency graph.
+        uses: advanced-security/maven-dependency-submission-action@v3
+
     env:
       MAVEN_OPTS: -Xmx2g