Enable Dependency Graph Integrator to raise PRs to add workflow

[tjsilver]

What does this change?

Enables repocop to identify production Scala repos that don't have the SBT dependency submission workflow already, and pick one repo at random to call Dependency Graph Integrator which will raise a PR on the repo to include the workflow, and enable Dependabot alerts/Dependency Graph if not enabled.

Why?

This is part of our migration away from Snyk over the next year.

How has it been verified?

Tested locally with CODE data.

Next steps

• Prioritise this for repos that don't have the Snyk workflow - this could be handled manually as it's only a handful.
• Enable the integrator for Gradle/Kotlin repos, and any other of our languages for which there is a dependency submission workflow available.
• Increase the number of PRs raised per run...?
• Update our recommendations

[github-actions]

Deploy build 5466 of deploy::service-catalogue to CODE

All deployment options

• Deploy build 5466 of deploy::service-catalogue to CODE
• Deploy parts of build 5466 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.

[NovemberTang]

Could we test this on CODE to make sure it works end-to-end (except for the actual raise the PR bit?)

[tjsilver]

Could we test this on CODE to make sure it works end-to-end (except for the actual raise the PR bit?)

Yes, will try again. Having trouble getting repocop to run on CODE due to a permissions error.

[tjsilver]

Tested on CODE and worked as expected.