USe config-maven

Author: claire-villard-sonarsource

.github/workflows/build.yml

@@ -55,22 +55,15 @@ jobs:
         with:
           version: 2025.7.12
 
-      - uses: SonarSource/ci-github-actions/get-build-number@v1
-
-      - name: Vault
-        id: secrets
-        uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32  # 3.1.0
+      - uses: SonarSource/ci-github-actions/config-maven@v1
         with:
-          secrets: |
-            development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
-            development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader username | ARTIFACTORY_PRIVATE_USERNAME;
+          artifactory-reader-role: private-reader
+          cache-paths: |
+            ~/.m2/repository
 
       - name: Run Integration Tests
         env:
           SQ_VERSION: ${{ matrix.sq_version }}
-          ARTIFACTORY_PRIVATE_USERNAME: vault-SonarSource-sonar-scanner-cli-private-reader
-          ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
-          ARTIFACTORY_PRIVATE_PASSWORD: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_PRIVATE_PASSWORD }}
         run: |
           cd it
           mvn -B -e -Dsonar.runtimeVersion="${SQ_VERSION}" -Dmaven.test.redirectTestOutputToFile=false verify
@@ -95,23 +88,16 @@ jobs:
         with:
           version: 2025.7.12
 
-      - uses: SonarSource/ci-github-actions/get-build-number@v1
-
-      - name: Vault
-        id: secrets
-        uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32  # 3.1.0
+      - uses: SonarSource/ci-github-actions/config-maven@v1
         with:
-          secrets: |
-            development/artifactory/token/SonarSource-sonar-scanner-cli-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
-            development/artifactory/token/SonarSource-sonar-scanner-cli-private-reader access_token | ARTIFACTORY_PRIVATE_PASSWORD;
+          artifactory-reader-role: private-reader
+          cache-paths: |
+            ~/.m2/repository
 
       - name: Run Integration Tests
         shell: bash
         env:
           SQ_VERSION: ${{ matrix.sq_version }}
-          ARTIFACTORY_PRIVATE_USERNAME: vault-SonarSource-sonar-scanner-cli-private-reader
-          ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
-          ARTIFACTORY_PRIVATE_PASSWORD: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_PRIVATE_PASSWORD }}
         run: |
           cd it
           mvn -B -e -Dsonar.runtimeVersion="${SQ_VERSION}" -Dmaven.test.redirectTestOutputToFile=false verify