Add a GitHub Action to automatically scan for vulnerable dependencies

.github/workflows/scan_dependencies.yml

@@ -0,0 +1,49 @@
+name: OWASP Dependency-Check
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - "*"
+
+jobs:
+  dependency-check:
+    name: Run OWASP Dependency-Check with GraalVM Java 21
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: Set up GraalVM Java 21
+        uses: graalvm/setup-graalvm@v1
+        with:
+          java-version: '21'
+
+      - name: Cache Gradle packages
+        uses: actions/cache@v3
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper/
+          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+          restore-keys: |
+            ${{ runner.os }}-gradle-
+
+      - name: Build Project
+        run: ./gradlew build --no-daemon
+
+      - name: Run OWASP Dependency-Check
+        run: ./gradlew dependencyCheckAnalyze
+
+      - name: Upload Dependency-Check Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: dependency-check-report
+          path: build/reports/dependency-check-report/dependency-check-report.html
+
+      - name: Fail if high vulnerabilities found
+        if: failure()
+        run: echo "High severity vulnerabilities found! Check the Dependency-Check report."

build.gradle

@@ -210,6 +210,11 @@ dependencies {
 	testImplementation("com.squareup.okhttp3:mockwebserver:5.0.0-alpha.14")
 }
 
+dependencyCheck {
+	format = 'HTML'
+	outputDirectory = 'build/reports/dependency-check-report' // Change to match expected location
+}
+
 // Apply a specific Java toolchain to ease working on different environments.
 java {
 	toolchain {