ci: unmanaged dependency check (#2396)

* ci: unmanaged dependency check

This check avoids accidentally adding 3rd party dependencies
go/cloud-sdk-java-dependency-governance-design.

* unmanaged_dependency_check as required check

.github/sync-repo-settings.yaml

@@ -19,6 +19,7 @@ branchProtectionRules:
       - 'Kokoro - Test: Java GraalVM Native Image'
       - 'Kokoro - Test: Java 17 GraalVM Native Image'
       - javadoc
+      - unmanaged_dependency_check
   - pattern: 1.113.14-sp
     isAdminEnforced: true
     requiredApprovingReviewCount: 1

.github/workflows/unmanaged_dependency_check.yaml

@@ -0,0 +1,22 @@
+on:
+  pull_request:
+name: Unmanaged dependency check
+jobs:
+  unmanaged_dependency_check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: temurin
+          java-version: 11
+      - name: Install modules
+        shell: bash
+        run: |
+          # No argument to build.sh installs the modules in local Maven
+          # repository
+          .kokoro/build.sh
+      - name: Unmanaged dependency check
+        uses: googleapis/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check@unmanaged-dependencies-check-latest
+        with:
+          bom-path: google-cloud-storage-bom/pom.xml