ci: set up dependency submission for gha

nais · Jun 21, 2024 · 8fab0eb · 8fab0eb
1 parent 4d2b29c
commit 8fab0eb
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
@@ -31,8 +31,15 @@ jobs:
           dependency-graph: generate-and-submit
       - name: Verify Gradle wrapper checksum
         uses: gradle/wrapper-validation-action@8d49e559aae34d3e0eb16cde532684bc9702762b # ratchet:gradle/wrapper-validation-action@v1
-      - name: Build with Gradle
+
+      - name: Setup Gradle to generate and submit dependency graphs
+        uses: gradle/actions/setup-gradle@v3
+        with:
+          dependency-graph: generate-and-submit
+
+      - name: Run the usual CI build (dependency-graph will be generated and submitted post-job)
         run: ./gradlew build
+
       - uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # ratchet:sigstore/[email protected]
       - name: Verify distroless base image
         run: |

diff --git a/.github/workflows/test-pull-requests.yml b/.github/workflows/test-pull-requests.yml
@@ -19,5 +19,10 @@ jobs:
       - name: Verify Gradle wrapper checksum
         uses: gradle/wrapper-validation-action@v1
 
-      - name: Build with Gradle
-        run: ./gradlew clean build
+      - name: Setup Gradle to generate and submit dependency graphs
+        uses: gradle/actions/setup-gradle@v3
+        with:
+          dependency-graph: generate-and-submit
+
+      - name: Run the usual CI build (dependency-graph will be generated and submitted post-job)
+        run: ./gradlew build