Use reusable workflow

Author: yasen-pavlov-sonarsource

.github/workflows/AutomateRelease.yml

@@ -1,20 +1,11 @@
 name: Automate release
 
-env:
-  JIRA_PROJECT_KEY: "SONARPHP"
-  PROJECT_NAME: "SonarPHP"
-  LANGUAGE: "php"
-  USE_JIRA_SANDBOX: true
-  IS_DRAFT_RELEASE: true
-  PM_EMAIL: 'yasen.pavlov@sonarsource.com'
-  RELEASE_AUTOMATION_SECRET_NAME: "sonar-php-release-automation"
-
 on:
   workflow_dispatch:
     inputs:
-      short_description:
+      short-description:
         description: |
-          A brief summary of what the release contains. 
+          A brief summary of what the release contains.
           This will be added directly to the release ticket.
         required: true
       rule_properties_changed:
@@ -48,132 +39,15 @@ on:
         required: false
 
 jobs:
-  pre-release-checks:
-    name: Pre-release checks
-    runs-on: ubuntu-latest
-    permissions:
-      statuses: read
-      contents: write
-      pull-requests: write
-      id-token: write
-    steps:
-      - name: Check Releasability Status
-        uses: SonarSource/release-github-actions/check-releasability-status@update_analyzer_action
-      
-      - name: Update Rule Metadata
-        id: update-rule-metadata
-        uses: SonarSource/release-github-actions/update-rule-metadata@update_analyzer_action
-      
-      - name: Check Rule Metadata Changes
-        if: steps.update-rule-metadata.outputs.has-changes == 'true'
-        run: |
-          echo "::error::Rule metadata changes detected. The generated PR needs to be merged first before continuing with the release."
-          echo "::error::Pull Request URL: ${{ steps.update-rule-metadata.outputs.pull-request-url }}"
-          echo "::error::Please merge the PR and restart this workflow."
-          exit 1
-
-  prepare-release:
-    name: Prepare release
-    runs-on: ubuntu-latest
-    needs: pre-release-checks
-    permissions:
-      statuses: read
-      contents: read
-      id-token: write
-    outputs:
-      release-version: ${{ steps.get-release-version.outputs.release-version }}
-      jira-version-name: ${{ steps.get-jira-version.outputs.jira-version-name }}
-      release-notes: ${{ steps.get-jira-release-notes.outputs.release-notes }}
-      jira-release-url: ${{ steps.get-jira-release-notes.outputs.jira-release-url }}
-    steps:
-      - name: Get Release Version
-        id: get-release-version
-        uses: SonarSource/release-github-actions/get-release-version@update_analyzer_action
-
-      - name: Get Jira Version
-        id: get-jira-version
-        uses: SonarSource/release-github-actions/get-jira-version@update_analyzer_action
-
-      - name: Get Jira Release Notes
-        id: get-jira-release-notes
-        uses: SonarSource/release-github-actions/get-jira-release-notes@update_analyzer_action
-
-  create-release-ticket:
-    name: Create release ticket
-    runs-on: ubuntu-latest
-    needs: prepare-release
-    permissions:
-      id-token: write
-    outputs:
-      release-ticket-key: ${{ steps.create-ticket.outputs.release-ticket-key }}
-      release-ticket-url: ${{ steps.create-ticket.outputs.release-ticket-url }}
-    steps:
-      - name: Create Jira Release Ticket
-        id: create-ticket
-        uses: SonarSource/release-github-actions/create-jira-release-ticket@update_analyzer_action
-        with:
-          project-name: ${{env.PROJECT_NAME }}
-          short-description: ${{ inputs.short_description }}
-          sq-compatibility: ${{ inputs.sq_compatibility }}
-          jira-release-url: ${{ needs.prepare-release.outputs.jira-release-url }}
-      
-      - name: Start progress on ticket
-        uses: SonarSource/release-github-actions/update-release-ticket-status@update_analyzer_action
-        with:
-          release-ticket-key: ${{ steps.create-ticket.outputs.release-ticket-key }}
-          status: "Start Progress"
-
-  publish-github-release:
-    name: Publish github release
-    runs-on: ubuntu-latest
-    needs: [prepare-release, create-release-ticket]
-    permissions:
-      id-token: write
-      contents: write
-      actions: write
-    outputs:
-      github-release-url: ${{ steps.publish-github-release.outputs.release-url}}
-    steps:
-      - name: Publish GitHub Release
-        id: publish-github-release
-        uses: SonarSource/release-github-actions/publish-github-release@update_analyzer_action
-        with:
-          release-version: ${{ needs.prepare-release.outputs.release-version }}
-          release-notes: ${{ needs.prepare-release.outputs.release-notes }}
-          release-workflow: 'sonar-release.yml'
-          draft: true
-
-  update-analyzers:
-    name: Update Analyzers in SQS and SQC
-    runs-on: ubuntu-latest
-    needs: [prepare-release, publish-github-release]
-    permissions:
-      id-token: write
-    outputs:
-      sqs-pull-request-url: ${{ steps.update-sqs.outputs.pull-request-url }}
-    steps:
-      - name: Update analyzer in SQS
-        id: update-sqs
-        uses: SonarSource/release-github-actions/update-analyzer@update_analyzer_action
-        with:
-          release-version: ${{ needs.prepare-release.outputs.release-version }}
-          ticket-key: 'SONAR-25669'
-          plugin-name: ${{ env.LANGUAGE }}
-          secret-name: ${{ env.RELEASE_AUTOMATION_SECRET_NAME }}
-          draft: ${{ env.IS_DRAFT_RELEASE }}
-          reviewers: ${{ github.event.inputs.integration_prs_reviewers }}
-
-  summarize_release:
-    name: Release
-    runs-on: ubuntu-latest
-    needs: [prepare-release, publish-github-release, update-analyzers]
-    steps:
-      - name: Post Summary to Workflow
-        run: |
-          echo "**Summary of the release:**" >> $GITHUB_STEP_SUMMARY
-          echo "- **Released Version:** ${{ needs.prepare-release.outputs.release-version }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **New Version:** ${{ needs.prepare-release.outputs.jira-version-name }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **Jira Release URL:** ${{ needs.prepare-release.outputs.jira-release-url }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **GitHub Release URL:** ${{ needs.publish-github-release.outputs.github-release-url }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **SQS Analyzer PR URL:** ${{ needs.update-analyzers.outputs.sqs_pr_url }}" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
+  automated-release:
+    uses: SonarSource/release-github-actions/.github/workflows/cloud-security-automated-release.yml@yp/add_cloud_security_workflow
+  with:
+    jira-project-key: "SONARPHP"
+    project-name: "SonarPHP"
+    plugin-name: "php"
+    use-jira-sandbox: true
+    is-draft-release: true
+    pm-email: "yasen.pavlov@sonarsource.com"
+    release-automation-secret-name: "sonar-php-release-automation"
+    short-description: ${{ inputs.short_description }}
+    sq-compatibility: ${{ inputs.sq_compatibility }}