Add sca scan

.bacon.yml

@@ -8,3 +8,11 @@ test_suites:
     }
     criteria : MERGE
     queue_name : small
+
+  - name: sca-scan
+    script_path: /root/okta/okta-devices-kotlin/scripts/
+    sort_order: '1'
+    timeout: '200'
+    script_name: dependency_scan
+    criteria: MERGE
+    queue_name: small

scripts/dependency_scan.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+
+start_scan=false
+if echo "${BRANCH}" | grep -Eq "(^master$|^([0-9]+\.[0-9]*[13579])$)"; then
+start_scan=true
+elif echo "${BRANCH}" | grep -Eq "(^release$|^preview$|^([0-9]+\.[0-9]+)-(pf|lc|pb|tf)[0-9]+$)"; then
+start_scan=true
+else
+start_scan=true
+fi
+
+if [[ "$start_scan" = false ]]; then
+echo 'Not a release or master. dependency-scan skipped'
+exit 0
+fi
+
+#####
+## Build Environment Setup
+#####
+java17_0
+
+#####
+## Execute Dependency Scanning
+#####
+REPO_DIR=$(git rev-parse --git-dir | sed 's/.git//g')
+
+dependency_scan --configuration-matching=implementation