Update build.yml

.github/workflows/build.yml

@@ -24,6 +24,29 @@ jobs:
     - name: Build with Maven
       run: mvn -B package -DskipTests --file pom.xml
 
+    - uses: AppThreat/dep-scan-action@master
+      with:
+        src: /github/workspace
+        report_file: /github/workspace/reports/depscan.json
+        profile: generic
+        # Must equal "I have sponsored OWASP-dep-scan." for action to run. Required.
+        thank_you: "I have sponsored OWASP-dep-scan."
+      env:
+        VDB_HOME: ${{ github.workspace }}/db
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+#    - uses: AppThreat/dep-scan-action@master
+#      with:
+#        thank_you: "I have sponsored OWASP-dep-scan."
+#      env:
+#        VDB_HOME: ${{ github.workspace }}/db
+#        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+#    - uses: actions/upload-artifact@v4
+#      with:
+#        name: reports
+#        path: reports
+
 
     # Run Contrast SCA to analyze security open source libraries
     - name: Contrast SCA Action