Merge remote-tracking branch 'origin/main' into uat

# Conflicts: # helm-chart/Chart.yaml # pom.xml # src/main/java/it/gov/pagopa/atmlayer/service/model/service/impl/BpmnVersionServiceImpl.java # src/main/java/it/gov/pagopa/atmlayer/service/model/service/impl/WorkflowResourceServiceImpl.java # src/test/resources/integration-test/output/result.html # src/test/resources/integration-test/output/result.json
pagopa · Sep 19, 2024 · ab19dac · ab19dac
2 parents a0a20e8 + a0d818a
commit ab19dac
Show file tree

Hide file tree

Showing 10 changed files with 700 additions and 39 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
@@ -32,7 +32,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Build docker image
         env:
@@ -52,12 +52,12 @@ jobs:
     runs-on: ubuntu-latest
     environment: ${{ matrix.environment }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
 
       - name: Setup JDK
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1
         with:
           java-version: '21'
           distribution: 'graalvm'
@@ -69,7 +69,7 @@ jobs:
 
       - name: Create Status check based on postman results
         id: process-postman
-        uses: im-open/[email protected]
+        uses: im-open/process-postman-test-results@4cc90df9ffdd1554366e19e759a15d008bdf3c39 # v2.1.5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           results-file: src/test/resources/integration-test/output/result.json
@@ -87,14 +87,14 @@ jobs:
           exit 1
 
       - name: Upload result.html
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: html-report
           path: src/test/resources/integration-test/output/result.html
 
       - name: JaCoCo Code Coverage Report
         id: jacoco_reporter
-        uses: PavanMudigonda/[email protected]
+        uses: PavanMudigonda/jacoco-reporter@76044ebc031589dcbce0bb1048ffee1072a43f97 # v4.9
         with:
           coverage_results_path: target/jacoco-report/jacoco.xml
           coverage_report_name: 'Coverage build ${{ github.run_number }}'
@@ -107,7 +107,7 @@ jobs:
 
       - name: Fail Build if overall coverage is less than 90%
         if: steps.jacoco_reporter.outputs.coverage_percentage < 90.0 
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         with:
           script: |
             core.setFailed('Overall coverage is less than 90%!')

diff --git a/.github/workflows/jacoco.yml b/.github/workflows/jacoco.yml
@@ -11,10 +11,10 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Setup JDK
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1
         with:
           java-version: '21'
           distribution: 'graalvm'
@@ -36,7 +36,7 @@ jobs:
 
       - name: Fail PR if overall coverage is less than 90%
         if: ${{ steps.jacoco.outputs.coverage-overall < 90.0 }}
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         with:
           script: |
             core.setFailed('Overall coverage is less than 90%!')
diff --git a/.github/workflows/manual-create-pre-release-from-dev.yml b/.github/workflows/manual-create-pre-release-from-dev.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
@@ -42,10 +42,10 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Setup JDK
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1
         with:
           java-version: '21'
           distribution: 'graalvm'
@@ -98,7 +98,7 @@ jobs:
 
       - name: Create Status check based on postman results
         id: process-postman
-        uses: im-open/[email protected]
+        uses: im-open/process-postman-test-results@4cc90df9ffdd1554366e19e759a15d008bdf3c39 # v2.1.5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           results-file: src/test/resources/integration-test/output/result.json
@@ -116,14 +116,14 @@ jobs:
           exit 1
 
       - name: Upload result.html
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: html-report
           path: src/test/resources/integration-test/output/result.html
 
       - name: JaCoCo Code Coverage Report
         id: jacoco_reporter
-        uses: PavanMudigonda/[email protected]
+        uses: PavanMudigonda/jacoco-reporter@76044ebc031589dcbce0bb1048ffee1072a43f97 # v4.9
         with:
           coverage_results_path: target/jacoco-report/jacoco.xml
           coverage_report_name: 'Coverage create pre-release: ${{ github.run_number }}'
@@ -136,7 +136,7 @@ jobs:
 
       - name: Fail Build if overall coverage is less than 90%
         if: steps.jacoco_reporter.outputs.coverage_percentage < 90.0 
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         with:
           script: |
             core.setFailed('Overall coverage is less than 90%!')

diff --git a/.github/workflows/manual-create-pre-release-from-hotfix.yml b/.github/workflows/manual-create-pre-release-from-hotfix.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
@@ -42,10 +42,10 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Setup JDK
-        uses: graalvm/setup-graalvm@v1
+        uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1
         with:
           java-version: '21'
           distribution: 'graalvm'
@@ -98,7 +98,7 @@ jobs:
 
       - name: Create Status check based on postman results
         id: process-postman
-        uses: im-open/[email protected]
+        uses: im-open/process-postman-test-results@4cc90df9ffdd1554366e19e759a15d008bdf3c39 # v2.1.5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           results-file: src/test/resources/integration-test/output/result.json
@@ -116,14 +116,14 @@ jobs:
           exit 1
 
       - name: Upload result.html
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: html-report
           path: src/test/resources/integration-test/output/result.html
 
       - name: JaCoCo Code Coverage Report
         id: jacoco_reporter
-        uses: PavanMudigonda/[email protected]
+        uses: PavanMudigonda/jacoco-reporter@76044ebc031589dcbce0bb1048ffee1072a43f97 # v4.9
         with:
           coverage_results_path: target/jacoco-report/jacoco.xml
           coverage_report_name: 'Coverage create pre-release: ${{ github.run_number }}'
@@ -136,7 +136,7 @@ jobs:
 
       - name: Fail Build if overall coverage is less than 90%
         if: steps.jacoco_reporter.outputs.coverage_percentage < 90.0 
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         with:
           script: |
             core.setFailed('Overall coverage is less than 90%!')

diff --git a/.github/workflows/manual-deploy-release.yml b/.github/workflows/manual-deploy-release.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
@@ -39,7 +39,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Verify if the tag is on ECR
         run: |

diff --git a/.github/workflows/manual-promote-release-in-prod.yml b/.github/workflows/manual-promote-release-in-prod.yml
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Configure uat AWS Credentials
         uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
@@ -39,7 +39,7 @@ jobs:
 
       - name: Login to uat Amazon ECR
         id: login-ecr-uat
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Copy docker image from uat ECR
         env:
@@ -57,7 +57,7 @@ jobs:
 
       - name: Login to prod Amazon ECR
         id: login-ecr-prod
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Push docker image in prod ECR
         env:

diff --git a/.github/workflows/manual-promote-release-in-uat.yml b/.github/workflows/manual-promote-release-in-uat.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Commit with "${{ inputs.commit }}:" prefix
         run: |
@@ -109,7 +109,7 @@ jobs:
 
       - name: Login to dev Amazon ECR
         id: login-ecr-dev
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Copy docker image from dev ECR
         env:
@@ -127,7 +127,7 @@ jobs:
 
       - name: Login to uat Amazon ECR
         id: login-ecr-uat
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2
 
       - name: Push docker image in uat ECR
         if: steps.semantic-release.outputs.new_release_published == 'true'

diff --git a/.github/workflows/performance-test.yml b/.github/workflows/performance-test.yml
@@ -22,10 +22,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
 
       - name: Run k6 local test
-        uses: grafana/[email protected]
+        uses: grafana/k6-action@e4714b734f2b0afaabeb7b4a69142745548ab9ec # v0.3.1
         env:
           MODEL_APPLICATION_BASE_URL: ${{ vars.APPLICATION_BASE_URL }}
           MODEL_APPLICATION_BASE_PATH: ${{ vars.APPLICATION_BASE_PATH }}
@@ -35,7 +35,7 @@ jobs:
 
       - name: Upload performance test file
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: performance-report
           path: performance_summary.html