diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml deleted file mode 100644 index 272cd05d974f..000000000000 --- a/.github/workflows/backport.yml +++ /dev/null @@ -1,25 +0,0 @@ -name: â™ģ Backport -on: - pull_request_target: - types: - - closed - - labeled - -permissions: - contents: read - -jobs: - backport: - permissions: - contents: write - pull-requests: write - issues: write - runs-on: ubuntu-20.04 - name: Backport - steps: - - name: Backport Bot - id: backport - if: github.event.pull_request.merged && ( ( github.event.action == 'closed' && contains( join( github.event.pull_request.labels.*.name ), 'backport') ) || contains( github.event.label.name, 'backport' ) ) - uses: m-kuhn/backport@v1.2.7 - with: - github_token: ${{ secrets.GH_TOKEN_BOT }} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml deleted file mode 100644 index 40ddc29fa231..000000000000 --- a/.github/workflows/codeql-analysis.yml +++ /dev/null @@ -1,87 +0,0 @@ -# For most projects, this workflow file will not need changing; you simply need -# to commit it to your repository. -# -# You may wish to alter this file to override the set of languages analyzed, -# or to provide custom queries or build logic. -# -# ******** NOTE ******** -# We have attempted to detect the languages in your repository. Please check -# the `language` matrix defined below to confirm you have the correct set of -# supported CodeQL languages. -# -name: "CodeQL" - -on: - push: - branches: [ main ] - pull_request: - # The branches below must be a subset of the branches above - branches: [ main ] - schedule: - - cron: '44 20 * * 5' - -jobs: - analyze: - name: Analyze - runs-on: ubuntu-latest - permissions: - actions: read - contents: read - security-events: write - - strategy: - fail-fast: false - matrix: - language: [ 'java', 'javascript' ] - # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ] - # Learn more about CodeQL language support at https://git.io/codeql-language-support - - steps: - - name: Checkout repository - uses: actions/checkout@v4 - with: - show-progress: 'false' - - - name: Setup Java JDK - uses: actions/setup-java@v4.1.0 - with: - java-version: 11 - # Java distribution. See the list of supported distributions in README file - distribution: temurin - # The package type (jdk, jre, jdk+fx, jre+fx) - java-package: jdk - cache: maven - - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: ${{ matrix.language }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - # queries: ./path/to/local/query, your-org/your-repo/queries@main - - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). - # If this step fails, then you should remove it and run the build manually (see below) - - name: Autobuild - uses: github/codeql-action/autobuild@v3 - - # ℹī¸ Command-line programs to run using the OS shell. - # 📚 https://git.io/JvXDl - - # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines - # and modify them (or add more) to build your code if your project - # uses a compiled language - - #- run: | - # make bootstrap - # make release - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 - - - name: Remove SNAPSHOT jars from repository - run: | - find ~/.m2/repository -name "*SNAPSHOT*" -type d | xargs rm -rf {} diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml deleted file mode 100644 index 0d596bc06dfb..000000000000 --- a/.github/workflows/docs.yml +++ /dev/null @@ -1,41 +0,0 @@ -name: Documentation - -on: - push: - branches: - - main - paths: - - "docs/manual/**" - pull_request: - branches: - - main - paths: - - "docs/manual/**" - workflow_dispatch: - -jobs: - deploy-docs: - runs-on: ubuntu-latest - steps: - - name: Checkout GeoNetwork - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - name: Install Python - uses: actions/setup-python@v5 - with: - python-version: 3.x - - name: mkdocs install - run: pip install --upgrade pip && pip install -r docs/manual/requirements.txt - - name: git configuration - run: git config user.name 'github-actions[bot]' && git config user.email 'github-actions[bot]@users.noreply.github.com' - - name: build docs without publishing them - if: ${{ github.event_name == 'pull_request' }} - working-directory: docs/manual - run: | - mike deploy --title "4.4" --alias-type=copy --update-aliases 4.4 latest - - name: deploy latest docs to gh-pages branch - if: ${{ github.event_name != 'pull_request' }} - working-directory: docs/manual - run: | - mike deploy --push --title "4.4" --alias-type=copy --update-aliases 4.4 latest diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml deleted file mode 100644 index 8d473643803c..000000000000 --- a/.github/workflows/linux.yml +++ /dev/null @@ -1,73 +0,0 @@ -name: Linux GitHub CI - -on: [pull_request,push,workflow_dispatch] - -env: - MAVEN_OPTS: -Dmaven.wagon.httpconnectionManager.ttlSeconds=25 -Dmaven.wagon.http.retryHandler.count=3 -Xmx512m -Dorg.slf4j.simpleLogger.showDateTime=true -Dorg.slf4j.simpleLogger.dateTimeFormat=HH:mm:ss,SSS -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn - TAKARI_SMART_BUILDER_VERSION: 0.6.1 - -jobs: - build: - runs-on: ${{ matrix.os }} - strategy: - matrix: - include: - - os: ubuntu-22.04 - jdk: 11 - steps: - - uses: actions/checkout@v4 - with: - # 500 commits, set to 0 to get all - fetch-depth: 500 - submodules: 'recursive' - show-progress: 'false' - - name: Set up JDK - uses: actions/setup-java@v4.1.0 - with: - distribution: 'temurin' - java-version: ${{ matrix.jdk }} - cache: 'maven' - - name: Setup Python - uses: actions/setup-python@v5 - with: - python-version: 3.x - - name: mkdocs install - working-directory: docs/manual - run: pip install --upgrade pip && pip install -r requirements.txt - - name: Set up Maven - uses: stCarolas/setup-maven@v5 - with: - maven-version: 3.8.3 - - name: Build with Maven - run: | - mvn -B -ntp -V install -DskipTests=true -Dmaven.javadoc.skip=true -Drelease -Pwith-doc - - name: Remove SNAPSHOT jars from repository - run: | - find ~/.m2/repository -name "*SNAPSHOT*" -type d | xargs rm -rf {} - - QA: - runs-on: ubuntu-22.04 - steps: - - uses: actions/checkout@v4 - with: - # 500 commits, set to 0 to get all - fetch-depth: 500 - submodules: 'recursive' - show-progress: 'false' - - name: Set up JDK - uses: actions/setup-java@v4.1.0 - with: - distribution: 'temurin' - java-version: 11 - cache: 'maven' - - name: Set up Maven - uses: stCarolas/setup-maven@v5 - with: - maven-version: 3.8.3 - - name: Test with maven - run: | - mvn -B resources:resources@copy-index-schema-to-source -f web - mvn -B -ntp -V -fae verify -Drelesae -Pit - - name: Remove SNAPSHOT jars from repository - run: | - find ~/.m2/repository -name "*SNAPSHOT*" -type d | xargs rm -rf {} diff --git a/.github/workflows/mvn-dep-tree.yml b/.github/workflows/mvn-dep-tree.yml deleted file mode 100644 index 0ac94031a83c..000000000000 --- a/.github/workflows/mvn-dep-tree.yml +++ /dev/null @@ -1,33 +0,0 @@ -# This job sends the maven dependency tree of the project to Github -# for further security analysis. - -name: "MavenDepTreeSubmission" - -on: - push: - branches: [ main ] - schedule: - - cron: '44 22 * * 5' - -jobs: - update-maven-dep-tree: - runs-on: ubuntu-latest - - steps: - - name: Checkout repository - uses: actions/checkout@v4 - with: - show-progress: 'false' - - - name: Setup Java JDK - uses: actions/setup-java@v4.1.0 - with: - java-version: 11 - # Java distribution. See the list of supported distributions in README file - distribution: temurin - # The package type (jdk, jre, jdk+fx, jre+fx) - java-package: jdk - cache: maven - - - name: Submit Dependency Snapshot - uses: advanced-security/maven-dependency-submission-action@v4 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml deleted file mode 100644 index 98cf13704c44..000000000000 --- a/.github/workflows/scorecard.yml +++ /dev/null @@ -1,72 +0,0 @@ -# This workflow uses actions that are not certified by GitHub. They are provided -# by a third-party and are governed by separate terms of service, privacy -# policy, and support documentation. - -name: Scorecard supply-chain security -on: - # For Branch-Protection check. Only the default branch is supported. See - # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection - branch_protection_rule: - # To guarantee Maintained check is occasionally updated. See - # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained - schedule: - - cron: '26 10 * * 5' - push: - branches: [ "main" ] - -# Declare default permissions as read only. -permissions: read-all - -jobs: - analysis: - name: Scorecard analysis - runs-on: ubuntu-latest - permissions: - # Needed to upload the results to code-scanning dashboard. - security-events: write - # Needed to publish results and get a badge (see publish_results below). - id-token: write - # Uncomment the permissions below if installing in a private repository. - # contents: read - # actions: read - - steps: - - name: "Checkout code" - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 - with: - persist-credentials: false - - - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 - with: - results_file: results.sarif - results_format: sarif - # (Optional) "write" PAT token. Uncomment the `repo_token` line below if: - # - you want to enable the Branch-Protection check on a *public* repository, or - # - you are installing Scorecard on a *private* repository - # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat. - # repo_token: ${{ secrets.SCORECARD_TOKEN }} - - # Public repositories: - # - Publish results to OpenSSF REST API for easy access by consumers - # - Allows the repository to include the Scorecard badge. - # - See https://github.com/ossf/scorecard-action#publishing-results. - # For private repositories: - # - `publish_results` will always be set to `false`, regardless - # of the value entered here. - publish_results: true - - # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF - # format to the repository Actions tab. - - name: "Upload artifact" - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 - with: - name: SARIF file - path: results.sarif - retention-days: 5 - - # Upload the results to GitHub's code scanning dashboard. - - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 - with: - sarif_file: results.sarif diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml deleted file mode 100644 index 5788e6859bdc..000000000000 --- a/.github/workflows/sonarcloud.yml +++ /dev/null @@ -1,47 +0,0 @@ -name: SonarCloud QA -on: - push: - branches: - - main - pull_request: - types: [opened, synchronize, reopened] -jobs: - build: - name: Build - runs-on: ubuntu-latest - # Only analyze with Sonar on non-fork repos: - # https://github.community/t/how-to-detect-a-pull-request-from-a-fork/18363/4 - if: github.event.pull_request.head.repo.fork != true - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - submodules: 'recursive' - show-progress: 'false' - - name: Set up JDK 11 - uses: actions/setup-java@v4.1.0 - with: - distribution: 'temurin' - java-version: '11' - cache: 'maven' - - name: Cache SonarCloud packages - uses: actions/cache@v4 - with: - path: ~/.sonar/cache - key: ${{ runner.os }}-sonar - restore-keys: ${{ runner.os }}-sonar - - name: Build GN - run: mvn -B package -DskipTests - - - name: Set up JDK 21 # Sonarcloud analyzer needs at least JDK 17 - uses: actions/setup-java@v4.1.0 - with: - distribution: 'temurin' - java-version: '21' - cache: 'maven' - - name: Analyze with Sonar - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} - #TODO: Enable tests, if reliable: - run: mvn -B org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=geonetwork_core-geonetwork -Dsonar.organization=geonetwork -DskipTests=true -Dmaven.javadoc.skip=true