From ad27f0d5186060f7b9a466e0928159bcce2b98ab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Arnau=20Alc=C3=A1zar=20Lleopart?= Date: Tue, 19 Nov 2024 14:46:09 +0100 Subject: [PATCH 1/2] enable dependabot --- .../security_submit_dependencies.yml | 27 +++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/security_submit_dependencies.yml diff --git a/.github/workflows/security_submit_dependencies.yml b/.github/workflows/security_submit_dependencies.yml new file mode 100644 index 0000000..50158ae --- /dev/null +++ b/.github/workflows/security_submit_dependencies.yml @@ -0,0 +1,27 @@ +name: Generate dependency graph for tower-agent +on: + pull_request: + + +permissions: + contents: write + +jobs: + dependency-submission: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Setup Graalvm + uses: graalvm/setup-graalvm@v1 + with: + java-version: '21' + distribution: 'graalvm-community' + native-image-musl: 'true' + + + - name: Generate and submit dependency graph for tower-agent + uses: gradle/actions/dependency-submission@v4 + with: + dependency-resolution-task: "dependencies" + additional-arguments: "--configuration runtimeClasspath" + dependency-graph: generate-and-submit From ba52994e3ffc072abe3d7465b26469059546442f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Arnau=20Alc=C3=A1zar=20Lleopart?= Date: Tue, 19 Nov 2024 15:43:56 +0100 Subject: [PATCH 2/2] trigger on push to master --- .github/workflows/security_submit_dependencies.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security_submit_dependencies.yml b/.github/workflows/security_submit_dependencies.yml index 50158ae..11da00c 100644 --- a/.github/workflows/security_submit_dependencies.yml +++ b/.github/workflows/security_submit_dependencies.yml @@ -1,6 +1,7 @@ name: Generate dependency graph for tower-agent on: - pull_request: + push: + branches: ['master'] permissions: