SONAR-24331 Updates CI tools

SonarSource · Feb 10, 2025 · 9b235f0 · 9b235f0
1 parent d7997b1
commit 9b235f0
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/.github/workflows/next-scan.yml b/.github/workflows/next-scan.yml
@@ -21,7 +21,7 @@ jobs:
         # Disabling shallow clone is recommended for improving relevancy of reporting
         fetch-depth: 0
     - id: secrets
-      uses: SonarSource/vault-action-wrapper@3.0.0
+      uses: SonarSource/vault-action-wrapper@v3
       with:
         secrets: |
           development/kv/data/next token | sq_next_token;

diff --git a/.github/workflows/release-template.yml b/.github/workflows/release-template.yml
@@ -13,18 +13,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@3.0.0
+        uses: SonarSource/vault-action-wrapper@v3
         with:
           secrets: |
             development/kv/data/sign key | gpg_key;
             development/kv/data/sign passphrase | gpg_passphrase;
       - name: Generate CycloneDX SBOM
-        uses: SonarSource/gh-action_sbom@v1
+        uses: SonarSource/gh-action_sbom@v3
         with:
           image: "sonarqube:${{ inputs.tag }}"
           filename: "sonarqube-${{ inputs.tag }}-bom.json"
           upload-artifact: true
           upload-release-assets: true
         env:
           GPG_PRIVATE_KEY_PASSPHRASE: ${{ fromJSON(steps.secrets.outputs.vault).gpg_passphrase }}
-          GPG_PRIVATE_KEY_BASE64: ${{ fromJSON(steps.secrets.outputs.vault).gpg_key }}
+          GPG_PRIVATE_KEY_BASE64: ${{ fromJSON(steps.secrets.outputs.vault).gpg_key }}
diff --git a/.github/workflows/slack_notify.yml b/.github/workflows/slack_notify.yml
@@ -7,6 +7,6 @@ jobs:
   slack-notifications:
     permissions:
       id-token: write  # to authenticate via OIDC
-    uses: SonarSource/gh-action_build-notify/.github/workflows/main.yaml@v1
+    uses: SonarSource/gh-action_build-notify/.github/workflows/main.yaml@v2
     with:
       slackChannel: squad-sq-platform-build-notification