[Implementation] IAM-6273: Workflow for here-aaa-java-sdk Vulnerability scanning

.github/dependabot.yml

@@ -0,0 +1,19 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: maven
+    directories:
+      - "**/*"
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: "Maven"
+    reviewers:
+      - "owenkellett"
+      - "spaltis"
+      - "ashishKhushiKumar"
+      - "anishb266"

.github/workflows/dependency-review.yml

@@ -0,0 +1,14 @@
+name: 'Dependency Review'
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4.7.1

.github/workflows/test.yml

@@ -1,23 +1,25 @@
 name: Run AAA SDK CI
 
-on: [push, pull_request, workflow_dispatch]
+on: [push, workflow_dispatch]
 
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v4.2.2
       - name: Cache local Maven repository
-        uses: actions/cache@v2
+        uses: actions/cache@v4.2.3
         with:
           path: $HOME/.m2
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
           restore-keys: |
             ${{ runner.os }}-maven-
       - name: Setup Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v4.7.1
         with:
           java-version: '8'
+          distribution: 'zulu'
       - name: Verify Maven installation
         run: mvn -v
       - name: Run AAA SDK tests