Skip to content

Commit f3d2efa

Browse files
authored
ci: add gradle dependency submission (#15259)
Poached workflow from apache/solr. Maybe the regexps need tweaking for our use-case. Purpose is to properly populate the dependency graph for alerting/tracking of any supply chain issues.
1 parent 63ac5ac commit f3d2efa

File tree

1 file changed

+35
-0
lines changed

1 file changed

+35
-0
lines changed
Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
---
2+
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
3+
name: Dependency Submission
4+
5+
"on":
6+
workflow_dispatch:
7+
push:
8+
branches: [ "main" ]
9+
schedule:
10+
- cron: '44 4 * * 2'
11+
12+
permissions: {}
13+
14+
jobs:
15+
dependency-submission:
16+
name: Submit gradle dependencies
17+
runs-on: ubuntu-latest
18+
permissions:
19+
contents: write # see action's documentation
20+
steps:
21+
- name: Checkout repository
22+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
23+
with:
24+
persist-credentials: false
25+
26+
- name: Configure tools
27+
uses: ./.github/actions/prepare-for-build
28+
29+
- name: Generate and submit dependency graph
30+
uses: gradle/actions/dependency-submission@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4
31+
env:
32+
DEPENDENCY_GRAPH_INCLUDE_CONFIGURATIONS: "(?i)(^|:)(compileClasspath|runtimeClasspath|testCompileClasspath|testRuntimeClasspath)$"
33+
DEPENDENCY_GRAPH_EXCLUDE_CONFIGURATIONS: "(?i)(^|:)(classpath|.*PluginClasspath|kotlinCompilerClasspath|kaptClasspath|annotationProcessor|detachedConfiguration.*)$"
34+
DEPENDENCY_GRAPH_RUNTIME_INCLUDE_CONFIGURATIONS: "(?i)(^|:)runtimeClasspath$"
35+
DEPENDENCY_GRAPH_RUNTIME_EXCLUDE_CONFIGURATIONS: "(?i)(^|:)testRuntimeClasspath$"

0 commit comments

Comments
 (0)