I tried Integrating dependency-submission and dependency-review-action for pull requests from public forked repositories, the workflow files are as follows:

• https://github.com/Pil0tXia/eventmesh/blob/2f7c34ab75a92871d80b32b841a591ec6ffd846a/.github/workflows/code-scanning.yml
• https://github.com/Pil0tXia/eventmesh/blob/2f7c34ab75a92871d80b32b841a591ec6ffd846a/.github/workflows/dependency-graph.yml
• https://github.com/Pil0tXia/eventmesh/blob/2f7c34ab75a92871d80b32b841a591ec6ffd846a/.github/workflows/license.yml

However, neither dependency-submission@v3 (Commit, Actions log) or setup-gradle@v3 (Commit, Actions log), the following log was output, and the gradle dependencies were not added to the dependency graph of the Repo (that is, the artifacts marked with Detected by GitHub Dependency Graph Gradle Plugin):

Artifact download completed successfully.
Downloading dependency-graph artifact dependency-graph_code_scanning-build-java.json to /home/runner/work/eventmesh/eventmesh
Found dependency graph files:
No dependency graph files found to submit.

When I rolled back to gradle/gradle-build-action@v2, it worked (Commit, Actions log), and the dependency graph of the Repo had been updated.