Add dependency scaning

https://docs.gitlab.com/ee/user/application_security/dependency_scanning/

The Dependency Scanning feature can automatically find security vulnerabilities in your dependencies while you’re developing and testing your applications. For example, dependency scanning lets you know if your application uses an external (open source) library that is known to be vulnerable. You can then take action to protect your application.

Not yet complete: https://gitlab.com/gitlab-org/security-products/tests/java-android