diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9241c11..67c4552 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: # The reusable workflow fixes the query suite to +security-and-quality org-wide; # build-mode: none analyses the sources directly (no Maven build needed for this # zero-dependency library). - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 761fe32..8773eac 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index b0652d7..371dc55 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index cd9c3d9..410d330 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -14,7 +14,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e980e41..d554e1c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 3ad9c10..f9d2b4a 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 permissions: security-events: write id-token: write