diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml new file mode 100644 index 0000000..e60c55e --- /dev/null +++ b/.github/workflows/unified-dogfooding.yml @@ -0,0 +1,34 @@ +name: Unified Dogfooding scans +on: + schedule: + # Run nightly at 2 AM UTC (same as Cirrus CI nightly cron) + - cron: '0 2 * * *' + workflow_dispatch: + +jobs: + unified-platform-dogfooding: + runs-on: github-ubuntu-latest-s + name: Unified Platform Dogfooding + permissions: + id-token: write + contents: read + steps: + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: jdx/mise-action@c37c93293d6b742fc901e1406b8f764f6fb19dac # v2.4.4 + with: + version: 2025.7.12 + - uses: SonarSource/ci-github-actions/build-maven@v1 + with: + artifactory-reader-role: private-reader # Override default public-reader + artifactory-deployer-role: qa-deployer # Override default public-deployer + run-shadow-scans: true + + - name: Run IRIS Analysis + uses: SonarSource/unified-dogfooding-actions/run-iris@v1 + with: + primary_project_key: "org.sonarsource.java:jdt-package" + primary_platform: "Next" + shadow1_project_key: "org.sonarsource.java:jdt-package" + shadow1_platform: "SQC-EU" + shadow2_project_key: "org.sonarsource.java:jdt-package" + shadow2_platform: "SQC-US" diff --git a/pom.xml b/pom.xml index 511117c..3643f7b 100644 --- a/pom.xml +++ b/pom.xml @@ -33,7 +33,7 @@ ${project.groupId}:${project.artifactId}:jar true - + sonarsource