feat(build): improve dependency graph generation and CI integration

Author: nega-xavier

.github/workflows/maven.yml

@@ -9,18 +9,42 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v4
+      # Checkout the code
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      # Set up JDK 21
       - name: Set up JDK 21
         uses: actions/setup-java@v4
         with:
           java-version: '21'
           distribution: 'temurin'
           cache: maven
+
+      # Build all modules
       - name: Build all modules
         run: mvn -B package
-      - name: Generate dependency graph
-        run: mvn com.github.ferstl:depgraph-maven-plugin:graph
-      - name: Update dependency graph
-        uses: advanced-security/maven-dependency-submission-action@571e99aab1055c2e71a1e2309b9691de18d6b7d6
 
+      # Generate dependency graph in JSON format
+      - name: Generate dependency graph in JSON
+        run: mvn com.github.ferstl:depgraph-maven-plugin:aggregate -DoutputFormat=json
+
+      # Debug JSON Dependency Graph
+      - name: Debug JSON Dependency Graph
+        run: cat target/dependency-graph.json || echo "Dependency graph is empty"
+
+      # List target directory for debugging
+      - name: List target directory
+        run: ls -la target
+
+      # Submit dependencies to GitHub Advanced Security
+      - name: Submit dependency graph
+        uses: advanced-security/maven-dependency-submission-action@v1
+        with:
+          dependency-graph-path: target/dependency-graph.json
+
+      # Debug Environment Variables
+      - name: Debug Environment
+        run: env

pom.xml

@@ -45,12 +45,26 @@
                 </plugin>
             </plugins>
         </pluginManagement>
-      
+
         <plugins>
             <plugin>
                 <groupId>com.github.ferstl</groupId>
                 <artifactId>depgraph-maven-plugin</artifactId>
                 <version>4.0.3</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>aggregate</goal>
+                        </goals>
+                    </execution>
+                </executions>
+                <configuration>
+                    <scope>compile</scope>
+                    <includeParentProjects>true</includeParentProjects>
+                    <includes>
+                        <include>com.jep:*</include>
+                    </includes>
+                </configuration>
             </plugin>
         </plugins>
     </build>