From aa176340cde016e0129d3c39ec164e194099ff03 Mon Sep 17 00:00:00 2001 From: Anil Belur Date: Mon, 19 May 2025 22:36:05 +1000 Subject: [PATCH] CI: Add Nexus IQ scan to rip-plt/dbaas Issue: IT-28096 Change-Id: I87464ee0205a15977ed969e5dea5da20eb4bfe4a Signed-off-by: Anil Belur --- .github/workflows/gerrit-novote-merge.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gerrit-novote-merge.yaml b/.github/workflows/gerrit-novote-merge.yaml index 1a2c2b9..6dab1ea 100644 --- a/.github/workflows/gerrit-novote-merge.yaml +++ b/.github/workflows/gerrit-novote-merge.yaml @@ -100,9 +100,17 @@ jobs: secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + call-sonartype-lifecycle: + name: "Sonatype Lifecycle Scan" + needs: notify + # yamllint disable-line rule:line-length + uses: lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml@ac846b1cfeaf3a7cac6f28413a5206afc9951464 # v0.2.11 + secrets: + NEXUS_IQ_PASSWORD: ${{ secrets.NEXUS_IQ_PASSWORD }} + report-status: if: ${{ always() }} - needs: [notify, call-autotools-sonarcloud] + needs: [notify, call-autotools-sonarcloud, call-sonartype-lifecycle] runs-on: ubuntu-latest steps: - name: Get workflow conclusion -- 2.16.6