Merge pull request #475 from guardian/sbt-dependency-graph-04aee5fecf…

…400b83

Submit sbt dependencies to GitHub for vulnerability monitoring

.github/workflows/sbt-dependency-graph.yaml

@@ -0,0 +1,21 @@
+name: Update Dependency Graph for SBT
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch: 
+jobs:
+  dependency-graph:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout branch
+        id: checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - name: Submit dependencies
+        id: submit
+        uses: scalacenter/sbt-dependency-submission@7ebd561e5280336d3d5b445a59013810ff79325e # v3.0.1
+      - name: Log snapshot for user validation
+        id: validate
+        run: cat ${{ steps.submit.outputs.snapshot-json-path }} | jq
+    permissions:
+      contents: write