diff --git a/.github/workflows/pr_and_main.yml b/.github/workflows/pr_and_main.yml index 8bbb2f3..d0933cd 100644 --- a/.github/workflows/pr_and_main.yml +++ b/.github/workflows/pr_and_main.yml @@ -11,9 +11,9 @@ jobs: snyk_scan_deps_licences: runs-on: ubuntu-latest steps: - - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b + - uses: RDXWorks-actions/checkout@main - name: Run Snyk to check for deps vulnerabilities - uses: snyk/actions/gradle-jdk17@b98d498629f1c368650224d6d212bf7dfa89e4bf # v0.4.0 + uses: RDXWorks-actions/snyk-actions/gradle-jdk17@master with: args: --all-projects --org=${{ secrets.SNYK_ORG_ID }} --severity-threshold=high env: @@ -22,9 +22,9 @@ jobs: snyk_scan_code: runs-on: ubuntu-latest steps: - - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b + - uses: RDXWorks-actions/checkout@main - name: Run Snyk to check for code vulnerabilities - uses: snyk/actions/gradle-jdk17@b98d498629f1c368650224d6d212bf7dfa89e4bf # v0.4.0 + uses: RDXWorks-actions/snyk-actions/gradle-jdk17@master with: args: --all-projects --org=${{ secrets.SNYK_ORG_ID }} --severity-threshold=high command: code test @@ -37,9 +37,9 @@ jobs: - snyk_scan_deps_licences - snyk_scan_code steps: - - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b + - uses: RDXWorks-actions/checkout@main - name: Generate SBOM # check SBOM can be generated but nothing is done with it - uses: snyk/actions/gradle-jdk17@b98d498629f1c368650224d6d212bf7dfa89e4bf # v0.4.0 + uses: RDXWorks-actions/snyk-actions/gradle-jdk17@master with: args: --all-projects --org=${{ secrets.SNYK_ORG_ID }} --format=cyclonedx1.4+json --json-file-output sbom.json command: sbom @@ -50,9 +50,9 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'push' && github.ref == 'refs/heads/main' steps: - - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b + - uses: RDXWorks-actions/checkout@main - name: Enable Snyk online monitoring to check for vulnerabilities - uses: snyk/actions/gradle-jdk17@b98d498629f1c368650224d6d212bf7dfa89e4bf # v0.4.0 + uses: RDXWorks-actions/snyk-actions/gradle-jdk17@master with: args: --all-projects --org=${{ secrets.SNYK_ORG_ID }} command: monitor diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index e18e256..c8d6793 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -9,15 +9,15 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@v3 - - uses: actions/setup-java@v3 + - uses: RDXWorks-actions/checkout@main + - uses: RDXWorks-actions/setup-java@main with: java-version: '8' distribution: 'adopt' - name: Validate Gradle wrapper - uses: gradle/wrapper-validation-action@e6e38bacfdf1a337459f332974bb2327a31aaf4b + uses: RDXWorks-actions/wrapper-validation-action@main - name: Publish package - uses: gradle/gradle-build-action@67421db6bd0bf253fb4bd25b31ebb98943c375e1 + uses: RDXWorks-actions/gradle-build-action@main with: arguments: publish env: @@ -26,9 +26,9 @@ jobs: publish_sbom: runs-on: ubuntu-latest steps: - - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b + - uses: RDXWorks-actions/checkout@main - name: Generate SBOM - uses: snyk/actions/gradle-jdk17@b98d498629f1c368650224d6d212bf7dfa89e4bf # v0.4.0 + uses: RDXWorks-actions/snyk-actions/gradle-jdk17@master with: args: --all-projects --org=${{ secrets.SNYK_ORG_ID }} --format=cyclonedx1.4+json --json-file-output sbom.json command: sbom