diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 67c4552..4bb5cf0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: # The reusable workflow fixes the query suite to +security-and-quality org-wide; # build-mode: none analyses the sources directly (no Maven build needed for this # zero-dependency library). - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 8773eac..3c043f5 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 371dc55..fabb200 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 410d330..45391c0 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -14,7 +14,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d554e1c..b345532 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index f9d2b4a..e6b4143 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@937fbcf44d34d826b3bcd66d49d7a7d32030f39a # v0.18.0 permissions: security-events: write id-token: write