Updated

Signed-off-by: anisb <anish.b@here.com>

Author: anishb266

.github/dependabot.yml

@@ -9,14 +9,12 @@ updates:
     directories:
       - "**/*"
     schedule:
-      interval: daily
-      #      day: friday
-      #      timezone: Etc/UTC
-      time: 12:00
-      commit-message:
-        prefix: "mvn"
-      assignees:
-        - "owenkellett"
-        - "spaltis"
-        - "ashishKhushiKumar"
-        - "anishb266"
+      interval: weekly
+      day: friday
+    commit-message:
+        prefix: "Update"
+    reviewers:
+      - "owenkellett"
+      - "spaltis"
+      - "ashishKhushiKumar"
+      - "anishb266"

.github/workflows/test.yml

@@ -1,6 +1,9 @@
+include:
+  - local: '.github/dependabot.yml'
+
 name: Run AAA SDK CI
 
-on: [push, pull_request, workflow_dispatch]
+on: [push, workflow_dispatch]
 
 jobs:
   test:
@@ -21,4 +24,8 @@ jobs:
       - name: Verify Maven installation
         run: mvn -v
       - name: Run AAA SDK tests
-        run: mvn -Dhere.token.endpoint.url=https://stg.account.api.here.com/oauth2/token -Dhere.access.key.id=${{ secrets.ACCESS_KEY_ID }} -Dhere.access.key.secret=${{ secrets.ACCESS_KEY_SECRET }} clean install
+        run: mvn -Dhere.token.endpoint.url=https://stg.account.api.here.com/oauth2/token -Dhere.access.key.id=${{ secrets.ACCESS_KEY_ID }} -Dhere.access.key.secret=${{ secrets.ACCESS_KEY_SECRET }} clean install
+      - name: 'Checkout Repository'
+        uses: actions/checkout@v4
+      - name: 'Dependency Review'
+        uses: actions/dependency-review-action@v4