build: use OSV-Scanner GitHub Action

.github/workflows/pr.yml

@@ -37,6 +37,8 @@ jobs:
   osv-scanner:
     runs-on: ubuntu-latest
     continue-on-error: true
+    permissions:
+      security-events: write
     strategy:
       fail-fast: false
       matrix:
@@ -55,7 +57,10 @@ jobs:
       - name: Generate SBOM
         run: ./gradlew :${{ matrix.project }}:cyclonedxBom
       - name: Scan
-        run: osv-scanner scan --sbom ${{ matrix.project }}/build/reports/bom.json
+        uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml"
+        with:
+          scan-args: |-
+            --lockfile=${{ matrix.projecy }}/build/reports/bom.json
   java:
     name: Build and Test Java
     runs-on: ubuntu-latest