ACS-11627 Migrate alfresco-sdk to GHAS

2026-09-09 18:03:59 +00:00 · 2026-05-11 10:10:47 +05:30
parent 6c749e8d20
commit c42bacfb9d
2 changed files with 84 additions and 0 deletions
@@ -0,0 +1,57 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+registries:
+  maven-alfresco-internal:
+    type: maven-repository
+    url: https://artifacts.alfresco.com/nexus/content/groups/internal
+    username: ${{secrets.NEXUS_USERNAME}}
+    password: ${{secrets.NEXUS_PASSWORD}}
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    registries:
+      - maven-alfresco-internal
+    schedule:
+      interval: "daily"
+      time: "22:00"
+      timezone: "Europe/London"
+    open-pull-requests-limit: 10
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      # Ignore the SDK's own internal modules
+      - dependency-name: "org.alfresco.maven:*"
+      - dependency-name: "org.alfresco.maven.plugin:*"
+      - dependency-name: "org.alfresco.maven.archetype:*"
+    groups:
+      spring:
+        patterns:
+          - "org.springframework*"
+      alfresco:
+        patterns:
+          - "org.alfresco*"
+      apache-maven:
+        patterns:
+          - "org.apache.maven*"
+      commons:
+        patterns:
+          - "commons-*"
+          - "org.apache.commons*"
+      slf4j:
+        patterns:
+          - "org.slf4j*"
+      sonatype:
+        patterns:
+          - "org.sonatype*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
@@ -0,0 +1,27 @@
+name: "Load Dependency Graph"
+
+on:
+  push:
+    branches:
+      - "master"
+  schedule:
+    - cron: '0 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  scan-dependencies:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v17.0.0
+        with:
+          java-version: '21'
+          maven-version: '3.9.9'
+          maven-args: -Dscopes=compile,runtime
+          maven-username: ${{ secrets.NEXUS_USERNAME }}
+          maven-password: ${{ secrets.NEXUS_PASSWORD }}
+          maven-settings-path: ".ci.settings.xml"