We support a couple of ways of tracking Java dependencies, both Gradle and Maven. In order for us to find transitive dependencies we require access to your source code, as well as your dependencies file, due to the way Gradle and Maven work.
As long as you have one or more
build.gradle.kts (Gradle) or
pom.xml (Maven) in your repository we will automatically scan it/them for dependencies when you have done any of our integrations to your CI/CD pipeline.