Update actions/dependency-review-action digest to 3b139cf #489

	name: Java build with Gradle and SonarCloud
	on:
	push:
	pull_request:
	types:
	- opened
	- synchronize
	- reopened
	branches:
	- main
	jobs:
	build:
	name: Build and analyze
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	- name: Set up JDK 17
	uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4
	with:
	java-version: 17
	distribution: 'zulu' # Alternative distribution options are available
	- name: Cache SonarCloud packages
	uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
	with:
	path: ~/.sonar/cache
	key: ${{ runner.os }}-sonar
	restore-keys: ${{ runner.os }}-sonar
	- name: Cache Gradle packages
	uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
	with:
	path: ~/.gradle/caches
	key: ${{ runner.os }}-gradle-${{ hashFiles('*/.gradle') }}
	restore-keys: ${{ runner.os }}-gradle
	- name: Build and analyze
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	run: ./gradlew build jacocoTestReport sonar --info

Provide feedback