diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml index abce55d..cc06289 100644 --- a/.github/workflows/maven-verify.yml +++ b/.github/workflows/maven-verify.yml @@ -31,7 +31,7 @@ jobs: # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive - name: Update dependency graph - uses: advanced-security/maven-dependency-submission-action@73da25169f2ac4d336320399ba58070deebc1208 + uses: advanced-security/maven-dependency-submission-action@bfd2106013da0957cdede0b6c39fb5ca25ae375e # fails with read-only token on PRs, so only run it on main pushes # if DISABLE_MAVEN_DEPENDENCY_SUBMISSION is set to true, skip this step if: ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' && vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION != 'true' }}