GitHub and Gradle Partner To Strengthen Supply Chain Security

 Integrating Gradle builds with Github's Actions promotes the best security practices among Gradle users. To do this there's a new official and open-source GitHub Action that generates complete and accurate information about dependencies in Gradle projects courtesy of Dependabot. 

https://www.i-programmer.info/news/90-tools/17224-github-and-gradle-partner-to-strengthen-supply-chain-security.html