{"id":15288362,"url":"https://github.com/mikepenz/gradle-dependency-submission","last_synced_at":"2025-10-07T03:30:23.878Z","repository":{"id":40238473,"uuid":"506166474","full_name":"mikepenz/gradle-dependency-submission","owner":"mikepenz","description":"Calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API","archived":true,"fork":false,"pushed_at":"2024-01-25T09:28:08.000Z","size":6757,"stargazers_count":80,"open_issues_count":0,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-10-02T23:04:54.846Z","etag":null,"topics":["actions","automation","cd","ci","dependencies","dependency","github-actions","gradle","hacktoberfest","workflow"],"latest_commit_sha":null,"homepage":"https://blog.mikepenz.dev","language":"TypeScript","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mikepenz.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":["mikepenz"]}},"created_at":"2022-06-22T08:43:46.000Z","updated_at":"2025-07-11T08:56:35.000Z","dependencies_parsed_at":"2024-06-18T14:06:09.592Z","dependency_job_id":"041c4027-d31e-4831-ba18-0f5836c2bacd","html_url":"https://github.com/mikepenz/gradle-dependency-submission","commit_stats":{"total_commits":108,"total_committers":6,"mean_commits":18.0,"dds":0.08333333333333337,"last_synced_commit":"5aac1cd48a5099fd4375e5755bd0fdf214d974d1"},"previous_names":[],"tags_count":26,"template":false,"template_full_name":"actions/typescript-action","purl":"pkg:github/mikepenz/gradle-dependency-submission","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mikepenz%2Fgradle-dependency-submission","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mikepenz%2Fgradle-dependency-submission/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mikepenz%2Fgradle-dependency-submission/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mikepenz%2Fgradle-dependency-submission/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mikepenz","download_url":"https://codeload.github.com/mikepenz/gradle-dependency-submission/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mikepenz%2Fgradle-dependency-submission/sbom","scorecard":{"id":645841,"data":{"date":"2025-08-11","repo":{"name":"github.com/mikepenz/gradle-dependency-submission","commit":"f9bd3bb4b3b348357f775517814f954ded2badd1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.5,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle-example/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":0,"reason":"Found 0/11 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:30","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/gradle-dependency-submission.yml:12","Warn: no topLevel permission defined: .github/workflows/check-dist.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/gradle-dependency-submission.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/test.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gradle-dependency-submission.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/gradle-dependency-submission.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gradle-dependency-submission.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/gradle-dependency-submission.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gradle-dependency-submission.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/gradle-dependency-submission.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gradle-dependency-submission.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/gradle-dependency-submission.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/mikepenz/gradle-dependency-submission/test.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/test.yml:35","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   1 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-3787-6prv-h9w3","Warn: Project is vulnerable to: GHSA-9qxr-qj54-h672","Warn: Project is vulnerable to: GHSA-m4v8-wqvr-p9f7","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-21T12:07:05.883Z","repository_id":40238473,"created_at":"2025-08-21T12:07:05.883Z","updated_at":"2025-08-21T12:07:05.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278715508,"owners_count":26033296,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-07T02:00:06.786Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["actions","automation","cd","ci","dependencies","dependency","github-actions","gradle","hacktoberfest","workflow"],"created_at":"2024-09-30T15:48:00.317Z","updated_at":"2025-10-07T03:30:23.445Z","avatar_url":"https://github.com/mikepenz.png","language":"TypeScript","funding_links":["https://github.com/sponsors/mikepenz"],"categories":[],"sub_categories":[],"readme":"\u003e [!IMPORTANT]  \n\u003e With the introduction of support for the `Dependency Submission API` into the official [Gradle Build Action](https://github.com/gradle/gradle-build-action?tab=readme-ov-file#github-dependency-graph-support) this project is officially deprecated. \n\u003e Please consider using the [Gradle Build Action](https://github.com/gradle/gradle-build-action?tab=readme-ov-file#github-dependency-graph-support) for new projects.\n\n-------\n\n\n\u003cdiv align=\"center\"\u003e\n  :octocat:\n\u003c/div\u003e\n\u003ch1 align=\"center\"\u003e\n  gradle-dependency-submission\n\u003c/h1\u003e\n\n\u003cp align=\"center\"\u003e\n    ... calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API.\n\u003c/p\u003e\n\n-------\n\n\u003cp align=\"center\"\u003e\n    \u003ca href=\"#whats-included-\"\u003eWhat's included 🚀\u003c/a\u003e \u0026bull;\n    \u003ca href=\"#setup\"\u003eSetup 🛠️\u003c/a\u003e \u0026bull;\n    \u003ca href=\"#sample-%EF%B8%8F\"\u003eSample 🖥️\u003c/a\u003e \u0026bull;\n    \u003ca href=\"#contribute-\"\u003eContribute 🧬\u003c/a\u003e \u0026bull;\n    \u003ca href=\"#license\"\u003eLicense 📓\u003c/a\u003e\n\u003c/p\u003e\n\n-------\n\n### What's included 🚀\n\n- Supports any Gradle project\n  - Uses the Gradle `dependencies` task\n- Highly flexible configuration\n- Submits all maven dependencies via the Dependency Submission API\n\n\u003e **Note**: This action executes the `dependencies` task of a given Gradle project, and will submit the dependency tree via the [Dependency Submission API](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api).\n\n\u003e **Note**: At this time `Gradle 7.5` or newer is required as it offers a new task to retrieve individual properties. (Used to retrieve build file path, and project name)\n\n## Setup\n\n### Configure the workflow\n\n```yml\nname: build\non:\n  push:\n    branches:\n      - develop # run the action on your projects default branch\n\njobs:\n  build:\n    name: Dependencies\n    runs-on: ubuntu-latest\n    permissions: # The Dependency Submission API requires write permission\n      contents: write\n    steps:\n      - name: 'Checkout Repository'\n        uses: actions/checkout@v3\n\n      - name: Run snapshot action\n        uses: mikepenz/gradle-dependency-submission@{latest}\n        with:\n          gradle-project-path: \"gradle-example\"\n          gradle-build-module: \":app\"\n```\n\n\u003cdetails\u003e\u003csummary\u003e\u003cb\u003eRoot Module Config\u003c/b\u003e\u003c/summary\u003e\n\u003cp\u003e\n\nThe following example showcases a gradle module in the root, without a module name, and no sub-folder.\n\n```yml\n- name: Root Gradle Dependency Submission\n  uses: mikepenz/gradle-dependency-submission@{latest}\n  with:\n    use-gradlew: false\n    gradle-build-module: |-\n      :\n    gradle-build-configuration: |-\n      compileClasspath\n```\n\n\u003c/p\u003e\n\u003c/details\u003e\n\n\u003cdetails\u003e\u003csummary\u003e\u003cb\u003eMulti Module Config\u003c/b\u003e\u003c/summary\u003e\n\u003cp\u003e\n\n```yml\n- name: Gradle Dependency Submission\n  uses: mikepenz/gradle-dependency-submission@{latest}\n  with:\n    gradle-project-path: |-\n      gradle-example\n    gradle-build-module: |-\n      :app\n      :simple-app\n    gradle-build-configuration: |-\n      debugCompileClasspath\n```\n\n\u003c/p\u003e\n\u003c/details\u003e\n\n\u003e ℹ️ Currently the action has to be run on the default branch. Running it as part of a PR won't update the [Dependency graph](https://github.com/mikepenz/gradle-dependency-submission/network/dependencies) of your projects [Insights](https://github.com/mikepenz/gradle-dependency-submission/pulse) - This seems to be a GitHub requirement.\n\n### Inputs\n\n| **Input**      | **Description**                                                                                                                                                       |\n|----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `use-gradlew`    | Defines if `./gradlew` or `gradle` cli will be used to retrieve the dependencies. Defaults to 'true' e.g. `./gradlew`.|\n| `gradle-project-path`    | Defines the path to the gradle project. Defaults to ''. |\n| `gradle-build-module`    | Defines the module to retrieve the dependencies for. This is often `:app`. Defaults to ':'.  |\n| `gradle-build-configuration`    | Optional configuration filter, for which the dependencies are resolved. As example: Android projects - `debugCompileClasspath`, plain java projects - `compileClasspath`. |\n| `gradle-build-configuration-mapping`    | Optional configuration to allow per module build configuration mapping. Provide one mapping per line in the format like: `:module\\|compileClasspath` |\n| `gradle-dependency-path`    | Defines the path to the gradle dependency file, relative to the `gradle-project-path`. If not provided, automatically resolved via gradle and the `module` config. |\n| `sub-module-mode`  | Defines how the action handles sub projects/modules. Possible options `IGNORE`, `COMBINED`, `INDIVIDUAL`, `INDIVIDUAL_DEEP`. Default: `IGNORE`. |\n| `include-build-environment`  | Optional mode to enable the submission of the `buildEnvironment` as individual Manifest via the dependency submission API. Default: `false`. |\n| `fail-on-error`   | Optional setting to enable an action failure in case any of the dependencies can not be parsed. Default: `false`. |\n| `correlator`  | 'Optional correlator string to submit to GitHub to identify the dependency submission.  Defaults to generating based on gradle-build-module and gradle-build-configuration.' |\n| `legacy-support`  | 'Disabled by default. Optional setting to enable support for gradle versions below 7.5. Warning: When enabled, the action will retrieve all properties and retrieve the property value of interest. During the parsing this may include other properties. Prefer to upgrade to gradle 7.5 or newer instead!' |\n\n| **sub-module-mode**      |    **Description**           |\n| ----- | ---- |\n| `IGNORE`      | Ignores sub projects/modules and skips over their dependencies. Only the core module is being imported. |\n| `COMBINED`    | Combines and flattens the sub dependencies, and attaches them to the root of the parent module. |\n| `INDIVIDUAL`  | Handles every single module as its own `Manifest` in the dependency submission API. Uses the gradle API to retrieve the module paths, and imports them individually. |\n| `INDIVIDUAL_DEEP`  | Handles every single module as its own `Manifest` in the dependency submission API. Will call the `dependencies` task for every single sub project/module to gather the full tree. Uses the gradle API to retrieve the module paths, and imports them individually. |\n\n## Sample 🖥️\n\n[Snapshot dependencies](https://github.com/mikepenz/gradle-dependency-submission/network/dependencies)\n\n## Contribute 🧬\n\n```bash\n# Install the dependencies  \n$ npm install\n\n# Verify lint is happy\n$ npm run lint -- --fix\n\n# Build the typescript and package it for distribution\n$ npm run build \u0026\u0026 npm run package\n\n# Run the tests, use to debug, and test it out\n$ npm test\n```\n\n### Credits\n\n- [Go Dependency Submission Action](https://github.com/actions/go-dependency-submission/)\n- [Dependency Submission Toolkit](https://github.com/github/dependency-submission-toolkit)\n\n## Other actions\n\n- [release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action)\n- [action-junit-report](https://github.com/mikepenz/action-junit-report)\n- [xray-action](https://github.com/mikepenz/xray-action/)\n- [jira-release-composition-action](https://github.com/mikepenz/jira-release-composite-action)\n\n## License\n\n    Copyright (C) 2022 Mike Penz\n\n    Licensed under the Apache License, Version 2.0 (the \"License\");\n    you may not use this file except in compliance with the License.\n    You may obtain a copy of the License at\n\n       http://www.apache.org/licenses/LICENSE-2.0\n\n    Unless required by applicable law or agreed to in writing, software\n    distributed under the License is distributed on an \"AS IS\" BASIS,\n    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n    See the License for the specific language governing permissions and\n    limitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmikepenz%2Fgradle-dependency-submission","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmikepenz%2Fgradle-dependency-submission","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmikepenz%2Fgradle-dependency-submission/lists"}