Record the dependency graph using github actions

tinify · Dec 20, 2023 · 3f315f5 · 3f315f5
1 parent 9e196fe
commit 3f315f5
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
@@ -91,6 +91,14 @@ jobs:
         TINIFY_KEY: ${{ secrets.TINIFY_KEY }}
       run: mvn -Pintegration integration-test -B
 
+  record-dependency-graph:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Submit Dependency Snapshot
+        uses: advanced-security/maven-dependency-submission-action@v3
+
   publish: 
     if: |
      github.repository == 'tinify/tinify-java' &&
@@ -142,4 +150,4 @@ jobs:
       env:
         GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
         SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
-        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}