diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml deleted file mode 100644 index beca634a..00000000 --- a/.github/workflows/dependency-submission.yml +++ /dev/null @@ -1,34 +0,0 @@ -# Submit the full transitive Maven dependency snapshot to the repository's dependency graph. -# This improves vulnerability detection beyond static manifest parsing and provides snapshots -# for main so dependency review has real snapshot data to compare against. -name: Dependency submission - -on: - push: - branches: [ "main" ] - workflow_dispatch: - -# Cancel superseded runs for the same ref to save runner minutes. -concurrency: - group: dependency-submission-${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -permissions: - contents: write - -jobs: - dependency-submission: - runs-on: ubuntu-latest - timeout-minutes: 20 - steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - - - name: Set up JDK 17 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 - with: - java-version: '17' - distribution: 'zulu' - cache: maven - - - name: Submit Maven dependency snapshot - uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5.0.0