Repository navigation

PR Submit Dependency Graph #477

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.
	#
	# This workflow will:
	# * download a Gradle dependency graph file from workflow artifact storage
	# * submit it to GitHub's Dependency Graph API for review
	#
	# We must generate and submit dependencies in separate workflows because PR workflows from forked
	# repositories do not have 'write' permission to submit the dependency graph.
	#
	# See:
	# * https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#workflows-in-forked-repositories
	# * https://github.com/gradle/actions/blob/main/docs/dependency-submission.md#usage-with-pull-requests-from-public-forked-repositories

	name: PR Submit Dependency Graph

	on:
	workflow_run:
	workflows: ['PR Build and Record Dependencies']
	types: [completed]

	permissions:
	actions: read
	contents: write

	jobs:
	submit-dependency-graph:
	runs-on: ubuntu-latest
	steps:
	- name: Submit dependency graph
	uses: gradle/actions/dependency-submission@v4
	with:
	dependency-graph: download-and-submit