Commit c951939d authored by copilot-swe-agent[bot]'s avatar copilot-swe-agent[bot]
Browse files

Move GPG_SIGNING_PASSPHRASE to publish job only; SHA pin non-alfresco-build-tools actions 



Co-authored-by: default avatargionn <71768+gionn@users.noreply.github.com>
Agent-Logs-Url: https://github.com/Alfresco/alfresco-sdk/sessions/022a22e8-dc5d-4eec-9c63-fbf00ee1b8a4
parent aad58a6a

.github/workflows/ci.yml

+9 −8
Original line number Diff line number Diff line
@@ -19,7 +19,6 @@ env: 
  MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}

  MAVEN_CENTRAL_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}

  MAVEN_CENTRAL_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}

  GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}

  GITHUB_ACTIONS_DEPLOY_TIMEOUT: 90



jobs:
@@ -35,7 +34,7 @@ jobs: 
      github.ref_name == 'master' ||

      github.event_name == 'pull_request'

    steps:

      - uses: actions/checkout@v4

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1

      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1

        with:
@@ -56,7 +55,7 @@ jobs: 
      MAVEN_CLI_OPTS: >

        -B -q -e -fae -V -DinstallAtEnd=true -U

    steps:

      - uses: actions/checkout@v4

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1

        with:

          java-version: ${{ env.JAVA_VERSION }}
@@ -136,18 +135,18 @@ jobs: 
            java-version: 11

            suite: -Pcommunity-74-tests

    steps:

      - uses: actions/checkout@v4

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1

      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1

        with:

          java-version: ${{ matrix.java-version }}

      - name: "Login to Docker Hub"

        uses: docker/login-action@v3

        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0

        with:

          username: ${{ secrets.DOCKER_USERNAME }}

          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: "Login to Quay.io"

        uses: docker/login-action@v3

        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0

        with:

          registry: quay.io

          username: ${{ secrets.QUAY_USERNAME }}
@@ -164,7 +163,7 @@ jobs: 
    outputs:

        is_ga: ${{ steps.publish_version.outputs.is_ga }}

    steps:

      - uses: actions/checkout@v4

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1

      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1

        with:
@@ -187,8 +186,10 @@ jobs: 
    needs: [tests, check_version]

    if: >

      contains(github.event.head_commit.message, '[publish]') && needs.check_version.outputs.is_ga == 'true'

    env:

      GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}

    steps:

      - uses: actions/checkout@v4

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1

      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1

        with: