[DMS-515] CodeQL for Kafka Connectors (#13) #11

	# SPDX-License-Identifier: Apache-2.0
	# Licensed to the Ed-Fi Alliance under one or more agreements.
	# The Ed-Fi Alliance licenses this file to you under the Apache License, Version 2.0.
	# See the LICENSE and NOTICES files in the project root for more information.

	name: Dependency Graph Upload

	# Dependabot does not natively support generating a dependency graph
	# for Gradle files. This workflow calculates the dependency graph
	# and uploads into GitHub.
	# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#gradle

	on:
	push:
	branches: ["main"]
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: write

	jobs:
	dependency-submission:
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: kafka/ed-fi-kafka-connect-transforms
	steps:
	- name: Checkout sources
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Setup Java
	uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
	with:
	java-version: "17"
	distribution: "temurin"

	- name: Setup Gradle
	uses: gradle/actions/setup-gradle@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2

	- name: Generate Gradle wrapper
	run: gradle wrapper

	- name: Generate and submit dependency graph
	uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
	with:
	build-root-directory: kafka/ed-fi-kafka-connect-transforms

Provide feedback