diff --git a/.github/workflows/security_submit_dependencies.yml b/.github/workflows/security_submit_dependencies.yml new file mode 100644 index 0000000..11da00c --- /dev/null +++ b/.github/workflows/security_submit_dependencies.yml @@ -0,0 +1,28 @@ +name: Generate dependency graph for tower-agent +on: + push: + branches: ['master'] + + +permissions: + contents: write + +jobs: + dependency-submission: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Setup Graalvm + uses: graalvm/setup-graalvm@v1 + with: + java-version: '21' + distribution: 'graalvm-community' + native-image-musl: 'true' + + + - name: Generate and submit dependency graph for tower-agent + uses: gradle/actions/dependency-submission@v4 + with: + dependency-resolution-task: "dependencies" + additional-arguments: "--configuration runtimeClasspath" + dependency-graph: generate-and-submit