diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index bc67504..3be7609 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: # The reusable workflow fixes the query suite to +security-and-quality org-wide; # build-mode: none analyses the sources directly (no Maven build needed for this # zero-dependency library). - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index acad788..084516f 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 9aae3cd..d88a607 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 319d86f..3c97e0a 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -14,7 +14,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 071a877..4a47bdb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 1f16e17..a17dff7 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@4c508c662620fcc7c374e0a54d35ac84416b8140 # v0.19.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@5aed9a45d80dc68ae3f21f2fb24a81e5ecbdd865 # v0.20.0 permissions: security-events: write id-token: write