Roll back all Sonar GitHub Actions

renovate[bot] · web-flow · commit 288f28eec6f4 · 2025-12-24T12:25:57.000Z
diff --git a/.github/workflows/AutomateRelease.yml b/.github/workflows/AutomateRelease.yml
@@ -46,7 +46,7 @@ jobs:
 
   release:
     name: Release
-    uses: SonarSource/release-github-actions/.github/workflows/cloud-security-automated-release.yml@v1
+    uses: SonarSource/release-github-actions/.github/workflows/cloud-security-automated-release.yml@1.1.2
     needs: lock-branch
     permissions:
       statuses: read
diff --git a/.github/workflows/PullRequestClosed.yml b/.github/workflows/PullRequestClosed.yml
@@ -16,7 +16,7 @@ jobs:
         github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         with:
           secrets: |
             development/kv/data/jira user | JIRA_USER;
diff --git a/.github/workflows/PullRequestCreated.yml b/.github/workflows/PullRequestCreated.yml
@@ -16,7 +16,7 @@ jobs:
         && github.event.sender.type != 'Bot'
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         with:
           secrets: |
             development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN;
diff --git a/.github/workflows/RequestReview.yml b/.github/workflows/RequestReview.yml
@@ -15,7 +15,7 @@ jobs:
         github.event.pull_request.head.repo.full_name == github.repository
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         with:
           secrets: |
             development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN;
diff --git a/.github/workflows/SubmitReview.yml b/.github/workflows/SubmitReview.yml
@@ -18,7 +18,7 @@ jobs:
             || github.event.review.state == 'approved')
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         with:
           secrets: |
             development/kv/data/jira user | JIRA_USER;
diff --git a/.github/workflows/ToggleLockBranch.yml b/.github/workflows/ToggleLockBranch.yml
@@ -22,7 +22,7 @@ jobs:
       id-token: write
     steps:
       - id: secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         with:
           secrets: |
             development/github/token/{REPO_OWNER_NAME_DASH}-lock token | lock_token;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -46,11 +46,11 @@ jobs:
           rm gradle-md5-sums.txt
       - &cache-gradle-dependencies
         name: Cache Gradle Dependencies
-        uses: SonarSource/ci-github-actions/cache@v1
+        uses: SonarSource/ci-github-actions/cache@1.3.17
         with:
           path: ${{ env.GRADLE_USER_HOME }}
           key: gradle-${{ env.GRADLE_CACHE_KEY }}
-      - uses: SonarSource/ci-github-actions/build-gradle@v1
+      - uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         with:
           deploy-pull-request: true
           skip-tests: true
@@ -72,7 +72,7 @@ jobs:
       - *checkout-build-logic
       - *create-gradle-user-home
       - *cache-gradle-dependencies
-      - uses: SonarSource/ci-github-actions/build-gradle@v1
+      - uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         with:
           deploy-pull-request: false
           skip-tests: false
@@ -109,7 +109,7 @@ jobs:
       - *checkout-build-logic
       - *create-gradle-user-home
       - *cache-gradle-dependencies
-      - uses: SonarSource/ci-github-actions/build-gradle@v1
+      - uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         with:
           deploy-pull-request: false
           skip-tests: false
@@ -154,20 +154,20 @@ jobs:
           mkdir -p "${GITHUB_WORKSPACE}/orchestrator/${TODAY}"
       - &cache-orchestrator
         name: Cache Orchestrator
-        uses: SonarSource/ci-github-actions/cache@v1
+        uses: SonarSource/ci-github-actions/cache@1.3.17
         with:
           path: ${{ env.ORCHESTRATOR_HOME }}
           key: orchestrator-${{ env.TODAY }}
           enableCrossOsArchive: true
       - &orchestrator-secrets
-        uses: SonarSource/vault-action-wrapper@v3
+        uses: SonarSource/vault-action-wrapper@3.1.0
         id: secrets
         with:
           secrets: |
             development/artifactory/token/{REPO_OWNER_NAME_DASH}-public-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
             development/github/token/licenses-ro token | GITHUB_TOKEN;
       - name: Run QA Plugin Tests
-        uses: SonarSource/ci-github-actions/build-gradle@v1
+        uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         env:
           ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
           GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
@@ -214,7 +214,7 @@ jobs:
       - *cache-orchestrator
       - *orchestrator-secrets
       - name: Run QA Ruling Tests
-        uses: SonarSource/ci-github-actions/build-gradle@v1
+        uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         env:
           ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
           GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
@@ -261,7 +261,7 @@ jobs:
       - *cache-orchestrator
       - *orchestrator-secrets
       - name: Run PR Analysis Integration Tests
-        uses: SonarSource/ci-github-actions/build-gradle@v1
+        uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         env:
           ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
           GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
@@ -298,7 +298,7 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: SonarSource/ci-github-actions/promote@v1
+      - uses: SonarSource/ci-github-actions/promote@1.3.17
         with:
           promote-pull-request: true
 
diff --git a/.github/workflows/pr-cleanup.yml b/.github/workflows/pr-cleanup.yml
@@ -9,4 +9,4 @@ jobs:
     permissions:
       actions: write
     steps:
-      - uses: SonarSource/ci-github-actions/pr_cleanup@v1
+      - uses: SonarSource/ci-github-actions/pr_cleanup@1.3.17
diff --git a/.github/workflows/releasability-status.yaml b/.github/workflows/releasability-status.yaml
@@ -18,7 +18,7 @@ jobs:
       statuses: write
       contents: read
     steps:
-      - uses: SonarSource/gh-action_releasability/releasability-status@v3
+      - uses: SonarSource/gh-action_releasability/releasability-status@3.0.2
         with:
           optional_checks: 'jira'
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
     permissions:
       id-token: write
       contents: write
-    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@v6
+    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@6.2.0
     with:
       version: ${{ inputs.version }}
       releaseId: ${{ inputs.releaseId }}
diff --git a/.github/workflows/shadow_scan.yml b/.github/workflows/shadow_scan.yml
@@ -38,11 +38,11 @@ jobs:
           echo "GRADLE_CACHE_KEY=${GRADLE_CACHE_KEY}" >> $GITHUB_ENV
           rm gradle-md5-sums.txt
       - name: Cache Gradle Dependencies
-        uses: SonarSource/ci-github-actions/cache@v1
+        uses: SonarSource/ci-github-actions/cache@1.3.17
         with:
           path: ${{ env.GRADLE_USER_HOME }}
           key: gradle-${{ env.GRADLE_CACHE_KEY }}
-      - uses: SonarSource/ci-github-actions/build-gradle@v1
+      - uses: SonarSource/ci-github-actions/build-gradle@1.3.17
         with:
           deploy-pull-request: false
           # There might be a warning: Warning: Failed to fetch short-lived token for Develocity
diff --git a/.github/workflows/update-rule-metadata.yml b/.github/workflows/update-rule-metadata.yml
@@ -29,7 +29,7 @@ jobs:
       contents: write # required by SonarSource/release-github-actions/update-rule-metadata
       pull-requests: write # required by SonarSource/release-github-actions/update-rule-metadata
     steps:
-      - uses: SonarSource/release-github-actions/update-rule-metadata@6522bb713edc8d76bad000a48ada334aa3c8692f
+      - uses: SonarSource/release-github-actions/update-rule-metadata@a48ad982c658249f7596088bb04825d71890c8e4
         id: update-rule-metadata
         with:
           rule-api-version: ${{ github.event.inputs.rule-api-version}}
