Projects that use Gradle need to include dependencies that are resolved at build time in order to get a full, transitive dependency tree. To make this easier, dependency auto-submission now supports Gradle projects in addition to Maven. This feature automatically runs a Gradle dependency submission action upon a commit to the main branch of a repository, which builds a snapshot and uploads it to the dependency graph submission API. The dependency graph then can see the full dependency tree of the project, which is useful for generating SBOMs, dependency insights, and Dependabot security alerts.

In order to use this feature, you must first enable the dependency graph in your repository’s settings: under Advanced Security, enable Automatic Dependency Submission. Your repository must also have GitHub Actions enabled. Note that turning on this feature will incur actions usage. For more information, see Configuring automatic dependency submission.

OSZAR »