|
13 | 13 | # Nightly build on master (same as Jenkins: H H(17-19) * * *) |
14 | 14 | - cron: '0 18 * * *' |
15 | 15 |
|
| 16 | +permissions: |
| 17 | + packages: read |
| 18 | + |
16 | 19 | concurrency: |
17 | 20 | group: ${{ github.workflow }}-${{ github.ref }} |
18 | 21 | cancel-in-progress: true |
|
47 | 50 | distribution: 'temurin' |
48 | 51 | cache: maven |
49 | 52 |
|
| 53 | + - name: Configure Maven settings |
| 54 | + uses: s4u/maven-settings-action@v3.0.0 |
| 55 | + with: |
| 56 | + servers: | |
| 57 | + [{ |
| 58 | + "id": "codice", |
| 59 | + "username": "${{ github.actor }}", |
| 60 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 61 | + }, |
| 62 | + { |
| 63 | + "id": "connexta", |
| 64 | + "username": "${{ github.actor }}", |
| 65 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 66 | + }] |
| 67 | +
|
50 | 68 | - name: Quick install (skip tests) |
51 | 69 | run: mvn install $MAVEN_CLI_OPTS -DskipStatic=true -DskipTests=true |
52 | 70 |
|
|
80 | 98 | distribution: 'temurin' |
81 | 99 | cache: maven |
82 | 100 |
|
| 101 | + - name: Configure Maven settings |
| 102 | + uses: s4u/maven-settings-action@v3.0.0 |
| 103 | + with: |
| 104 | + servers: | |
| 105 | + [{ |
| 106 | + "id": "codice", |
| 107 | + "username": "${{ github.actor }}", |
| 108 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 109 | + }, |
| 110 | + { |
| 111 | + "id": "connexta", |
| 112 | + "username": "${{ github.actor }}", |
| 113 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 114 | + }] |
| 115 | +
|
83 | 116 | - name: Full build (excluding itests) |
84 | 117 | run: mvn clean install $MAVEN_CLI_OPTS -P !itests |
85 | 118 |
|
@@ -148,6 +181,21 @@ jobs: |
148 | 181 | distribution: 'temurin' |
149 | 182 | cache: maven |
150 | 183 |
|
| 184 | + - name: Configure Maven settings |
| 185 | + uses: s4u/maven-settings-action@v3.0.0 |
| 186 | + with: |
| 187 | + servers: | |
| 188 | + [{ |
| 189 | + "id": "codice", |
| 190 | + "username": "${{ github.actor }}", |
| 191 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 192 | + }, |
| 193 | + { |
| 194 | + "id": "connexta", |
| 195 | + "username": "${{ github.actor }}", |
| 196 | + "password": "${{ secrets.READ_PACKAGES }}" |
| 197 | + }] |
| 198 | +
|
151 | 199 | - name: OWASP Dependency Check |
152 | 200 | run: | |
153 | 201 | if [ "${{ github.event_name }}" != "pull_request" ]; then |
@@ -220,6 +268,8 @@ jobs: |
220 | 268 | needs.dependency-check.result == 'success' |
221 | 269 | runs-on: ubuntu-latest |
222 | 270 | environment: production |
| 271 | + permissions: |
| 272 | + packages: write |
223 | 273 | steps: |
224 | 274 | - name: Checkout |
225 | 275 | uses: actions/checkout@v4 |
|
0 commit comments