From e31c82bfd3fdd7cfc82b7a4e9ac5522bb7c8be4a Mon Sep 17 00:00:00 2001
From: Adrien Piquerez <adrien.piquerez@gmail.com>
Date: Tue, 2 Aug 2022 16:55:13 +0200
Subject: [PATCH] Add dependency-graph workflow

Submit all dependencies of the dotty build to the Github Dependency API
to receive reports of vulnerabilities from Dependabot
---
 .github/workflows/dependency-graph.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 .github/workflows/dependency-graph.yml

diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml
new file mode 100644
index 000000000000..f8facc0453ca
--- /dev/null
+++ b/.github/workflows/dependency-graph.yml
@@ -0,0 +1,12 @@
+name: Update Dependency Graph
+on:
+  push:
+    branches:
+      - main # default branch of the project
+jobs:
+  dependency-graph:
+    name: Update Dependency Graph
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: scalacenter/sbt-dependency-submission@v2