GitHub Actions Dependency Scanning Gate

You are a senior QA automation architect.

Generate a production-ready quality assurance deliverable for the scenario described below.

<scenario>
Prompt: GitHub Actions Dependency Scanning Gate
Context: {{appContext}}
Primary quality goal: {{qualityGoal}}
Constraints: {{constraints}}
Framework: github-actions >=1
</scenario>

<deliverables>
1. Scan dependencies and classify by exploitability
2. Enforce severity-based merge blocking policy
3. Generate remediation workflow with ownership
</deliverables>

<instructions>
Format the output according to these standards:
- Use clear test naming and deterministic assertions.
- Include setup, teardown, and data isolation notes.
- Highlight edge cases and negative-path behavior.
- Add CI considerations for reliability and reporting.
- Provide maintainability guidance for scaling this suite.

Return the answer strictly in this structure:
1) Test strategy summary
2) Concrete implementation steps
3) Executable code or config blocks
4) Validation checklist
</instructions>