From 85cd8e855bed3320a1988a3fdb0d7be219dca6a8 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Sun, 26 Jul 2026 17:57:04 +0000 Subject: [PATCH] Remove dependency-submission workflow: adds no value for PRs and confuses (#212) Co-Authored-By: Andreas Igel --- .github/workflows/dependency-submission.yml | 34 --------------------- 1 file changed, 34 deletions(-) delete mode 100644 .github/workflows/dependency-submission.yml diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml deleted file mode 100644 index beca634a..00000000 --- a/.github/workflows/dependency-submission.yml +++ /dev/null @@ -1,34 +0,0 @@ -# Submit the full transitive Maven dependency snapshot to the repository's dependency graph. -# This improves vulnerability detection beyond static manifest parsing and provides snapshots -# for main so dependency review has real snapshot data to compare against. -name: Dependency submission - -on: - push: - branches: [ "main" ] - workflow_dispatch: - -# Cancel superseded runs for the same ref to save runner minutes. -concurrency: - group: dependency-submission-${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -permissions: - contents: write - -jobs: - dependency-submission: - runs-on: ubuntu-latest - timeout-minutes: 20 - steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - - - name: Set up JDK 17 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0 - with: - java-version: '17' - distribution: 'zulu' - cache: maven - - - name: Submit Maven dependency snapshot - uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5.0.0