Bump org.springframework.security:spring-security-web from 5.8.11 to … #2795
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: dogfood merge | |
| # This workflow is triggered on pushes to master and dogfood branches | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - 'dogfood/**' | |
| # commenting 'delete' action, as it is triggered way too often | |
| # delete: | |
| # branches: | |
| # - 'dogfood/**' | |
| jobs: | |
| dogfood_merge: | |
| runs-on: ubuntu-latest | |
| name: Update dogfood branch | |
| permissions: | |
| id-token: write # required for SonarSource/vault-action-wrapper | |
| steps: | |
| - name: get secrets | |
| id: secrets | |
| uses: SonarSource/vault-action-wrapper@d1c1ab4ca5ad07fd9cdfe1eff038a39673dfca64 # tag=2.4.2-1 | |
| with: | |
| secrets: | | |
| development/kv/data/slack webhook | SLACK_WEBHOOK; | |
| development/github/token/{REPO_OWNER_NAME_DASH}-dogfood-merge token | dogfood_token; | |
| - name: git octopus step | |
| env: | |
| GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).dogfood_token }} | |
| id: dogfood | |
| uses: SonarSource/gh-action_dogfood_merge@v1 | |
| with: | |
| dogfood-branch: 'dogfood-on-peach' | |
| # Use the output from the `dogfood` step | |
| - name: Get the name of the dogfood branch and its HEAD SHA1 | |
| run: echo "The dogfood branch was `${{ steps.dogfood.outputs.dogfood-branch }}` and its HEAD SHA1 was `${{ steps.dogfood.outputs.sha1 }}`" | |
| # Notify on Slack | |
| - name: Notify failures on Slack | |
| if: failure() | |
| uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 | |
| env: | |
| SLACK_BOT_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).SLACK_BOT_TOKEN }} | |
| with: | |
| channel-id: squad-jvm-notifs | |
| slack-message: "Dogfood build for `${{ steps.dogfood.outputs.sha1 }}`: *failed*, see the logs at https://github.com/SonarSource/sonar-java/actions/workflows/dogfood.yml" |