Skip to content

Commit

Permalink
update dependency-submission workflow
Browse files Browse the repository at this point in the history
  • Loading branch information
deleonenriqueta committed Oct 16, 2024
1 parent 7ba58f0 commit 4043c51
Showing 1 changed file with 10 additions and 2 deletions.
12 changes: 10 additions & 2 deletions .github/workflows/dependency-submission.yml
Original file line number Diff line number Diff line change
@@ -1,3 +1,13 @@
# Workflow: Dependency Graph Submission and Vulnerability Reporting
#
# Trigger: This workflow runs on every merge to the main branch.
#
# Purpose: It generates and submits a dependency graph to the GitHub Dependency Submission API. The graph is used to
# trigger Dependabot Alerts for vulnerable dependencies, and to populate the Dependency Graph insights view in GitHub.
#
# Excludes:
# - Test-only dependencies

name: Dependency Submission

on:
Expand All @@ -21,9 +31,7 @@ jobs:
- name: Generate and submit dependency graph
uses: gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808 # pin@v4
with:
gradle-version: 7.5.1
dependency-graph-exclude-configurations: '.*[Tt]est(Compile|Runtime)Classpath'
dependency-graph-continue-on-failure: true
build-scan-publish: true
build-scan-terms-of-use-url: "https://gralde.com/help/legal-terms-of-use"
build-scan-terms-of-use-agree: "yes"

0 comments on commit 4043c51

Please sign in to comment.