diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ea53921..90ddb4a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -16,7 +16,7 @@ jobs: # Centralized in cuioss-organization, matching every other security/CI workflow in this repo. # build-mode: none avoids building the external-artifact benchmark module during CodeQL scanning. # The reusable workflow fixes the query suite to +security-and-quality org-wide. - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 43c7b77..e7bf549 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 8d103fe..21ec842 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -10,7 +10,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index bb14f4e..1fe7fb3 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -15,7 +15,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 47313cc..504028b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -17,7 +17,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index b76e632..ab0e2ab 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -13,7 +13,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@830c2dd2ffe4850be37c5faa0a0d112713dfd7e3 # v0.14.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@19d5894332b91eb52396659568933c4a751346a4 # v0.14.1 permissions: security-events: write id-token: write