Skip to content

CLP-1097 Migrate Orchestrator downloads to the JFrog Edge node for sonar-java #6257

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
guillaume-dequenne wants to merge 9 commits into
base: master
Choose a base branch
from
+17 −9
Open

CLP-1097 Migrate Orchestrator downloads to the JFrog Edge node for sonar-java #6257

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
738a30c
CLP-918 Migrate Orchestrator downloads to JFrog Edge
guillaume-dequenne Sep 28, 2026
c7fa53c
CLP-918 Keep Edge token wait action in repository
guillaume-dequenne Sep 29, 2026
952fc9b
CLP-918 Report Edge probe response and bound connection time
guillaume-dequenne Sep 29, 2026
4d74630
CLP-918 Retry transient Edge responses during token wait
guillaume-dequenne Sep 29, 2026
156d231
CLP-918 Use shared Edge token federation action
guillaume-dequenne Sep 29, 2026
e1725ec
Merge remote-tracking branch 'origin/master' into CLP-918
hedinasr Oct 2, 2026
dca4538
BUILD-12160 Resolve through the JFrog Edge with Edge-issued tokens
hedinasr Oct 2, 2026
706126f
BUILD-12160 Use Orchestrator 6.4.3 locators in the scanner integratio…
hedinasr Oct 2, 2026
7976ab5
BUILD-12160 Drop the ineffective Orchestrator locators override
hedinasr Oct 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 15 additions & 8 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,12 @@ jobs:
- uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
with:
version: 2026.9.14
- uses: SonarSource/ci-github-actions/build-maven@v2
- uses: SonarSource/ci-github-actions/build-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
id: build-maven
env:
MAVEN_OPTS: "-Xmx8g"
with:
repox-url: https://repox-internal.dev.sonar.build
Comment thread
gitar-bot[bot] marked this conversation as resolved.
deploy-pull-request: true
sonar-platform: none # Prevent analysis
# Override artifactory roles for public repo using private access
Expand Down Expand Up @@ -91,8 +92,9 @@ jobs:
with:
namespace: ruling-qa-${{ matrix.item.runner }}-${{ matrix.item.profile }}-${{ matrix.item.sq_version }}
- name: Configure Maven
uses: SonarSource/ci-github-actions/config-maven@v2
uses: SonarSource/ci-github-actions/config-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
Comment thread
gitar-bot[bot] marked this conversation as resolved.
artifactory-reader-role: private-reader
use-develocity: ${{ env.USE_DEVELOCITY }}
develocity-url: ${{ env.DEVELOCITY_URL }}
Expand Down Expand Up @@ -210,8 +212,9 @@ jobs:
with:
namespace: plugin-qa-${{ matrix.sq_version }}
- name: Configure Maven
uses: SonarSource/ci-github-actions/config-maven@v2
uses: SonarSource/ci-github-actions/config-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
artifactory-reader-role: private-reader
use-develocity: ${{ env.USE_DEVELOCITY }}
develocity-url: ${{ env.DEVELOCITY_URL }}
Expand Down Expand Up @@ -258,8 +261,9 @@ jobs:
- uses: ./.github/actions/maven-cache
with:
namespace: sanity
- uses: SonarSource/ci-github-actions/config-maven@v2
- uses: SonarSource/ci-github-actions/config-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
artifactory-reader-role: private-reader
use-develocity: ${{ env.USE_DEVELOCITY }}
develocity-url: ${{ env.DEVELOCITY_URL }}
Expand Down Expand Up @@ -301,8 +305,9 @@ jobs:
secrets: |
development/kv/data/next url | SONAR_HOST_URL;
development/kv/data/next token | SONAR_TOKEN;
- uses: SonarSource/ci-github-actions/build-maven@v2
- uses: SonarSource/ci-github-actions/build-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
deploy: false
artifactory-reader-role: private-reader # Override default public-reader
artifactory-deployer-role: qa-deployer # Override default public-deployer
Expand Down Expand Up @@ -340,8 +345,9 @@ jobs:
- uses: ./.github/actions/maven-cache
with:
namespace: custom-rules-license-check
- uses: SonarSource/ci-github-actions/config-maven@v2
- uses: SonarSource/ci-github-actions/config-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
artifactory-reader-role: private-reader
use-develocity: ${{ env.USE_DEVELOCITY }}
develocity-url: ${{ env.DEVELOCITY_URL }}
Expand Down Expand Up @@ -384,8 +390,9 @@ jobs:
with:
namespace: qa-os-win
- name: Configure Maven
uses: SonarSource/ci-github-actions/config-maven@v2
uses: SonarSource/ci-github-actions/config-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
repox-url: https://repox-internal.dev.sonar.build
artifactory-reader-role: private-reader
use-develocity: ${{ env.USE_DEVELOCITY }}
develocity-url: ${{ env.DEVELOCITY_URL }}
Expand Down Expand Up @@ -414,7 +421,7 @@ jobs:
env:
BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
steps:
- uses: SonarSource/ci-github-actions/promote@v2
- uses: SonarSource/ci-github-actions/promote@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
with:
promote-pull-request: true

Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/unified-dogfooding.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,12 @@ jobs:
- uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
with:
version: 2026.9.14
- uses: SonarSource/ci-github-actions/build-maven@v2
- uses: SonarSource/ci-github-actions/build-maven@c3a85ac3a2f67f86966e2fb1fdf9a7c1bdc997dc # 2.2.0
env:
MAVEN_OPTS: "-Xmx8g"
JAVA_TOOL_OPTIONS: ""
with:
repox-url: https://repox-internal.dev.sonar.build
run-shadow-scans: true
artifactory-reader-role: private-reader
artifactory-deployer-role: qa-deployer
Expand Down
Loading