diff --git a/.github/workflows/maven--package-publish.yml b/.github/workflows/maven--package-publish.yml
index ed2ad1d..ef515b1 100644
--- a/.github/workflows/maven--package-publish.yml
+++ b/.github/workflows/maven--package-publish.yml
@@ -16,7 +16,7 @@ jobs:
with:
java-version: '11'
distribution: 'adopt'
- server-id: ossrh
+ server-id: central
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
@@ -24,8 +24,8 @@ jobs:
- name: Publish to Maven Central Repository
run: mvn --batch-mode -Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }} deploy
env:
- MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
- MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+ MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+ MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
# run: mvn --batch-mode deploy
\ No newline at end of file
diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml
deleted file mode 100644
index 049c02f..0000000
--- a/.github/workflows/secrets-scan.yml
+++ /dev/null
@@ -1,29 +0,0 @@
-name: Secrets Scan
-on:
- pull_request:
- types: [opened, synchronize, reopened]
-jobs:
- security-secrets:
- runs-on: ubuntu-latest
- steps:
- - uses: actions/checkout@v4
- with:
- fetch-depth: '2'
- ref: '${{ github.event.pull_request.head.ref }}'
- - run: |
- git reset --soft HEAD~1
- - name: Install Talisman
- run: |
- # Download Talisman
- wget https://github.com/thoughtworks/talisman/releases/download/v1.37.0/talisman_linux_amd64 -O talisman
-
- # Checksum verification
- checksum=$(sha256sum ./talisman | awk '{print $1}')
- if [ "$checksum" != "8e0ae8bb7b160bf10c4fa1448beb04a32a35e63505b3dddff74a092bccaaa7e4" ]; then exit 1; fi
-
- # Make it executable
- chmod +x talisman
- - name: Run talisman
- run: |
- # Run Talisman with the pre-commit hook
- ./talisman --githook pre-commit
\ No newline at end of file
diff --git a/CODEOWNERS b/CODEOWNERS
index 1be7e0d..0496bc6 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1 +1,11 @@
-* @contentstack/security-admin
+* @contentstack/devex-pr-reviewers
+
+.github/workflows/sca-scan.yml @contentstack/security-admin
+
+.github/workflows/codeql-anaylsis.yml @contentstack/security-admin
+
+**/.snyk @contentstack/security-admin
+
+.github/workflows/policy-scan.yml @contentstack/security-admin
+
+.github/workflows/issues-jira.yml @contentstack/security-admin
diff --git a/pom.xml b/pom.xml
index b533d55..46dce80 100644
--- a/pom.xml
+++ b/pom.xml
@@ -85,26 +85,24 @@
-
+
+ Maven Snapshot Repository
ossrh
https://oss.sonatype.org/content/repositories/snapshots
-
-
-
-
-
-
-
+
+ github
+ https://maven.pkg.github.com/contentstack/contentstack-java
+
+ Maven Release Repository
ossrh
https://oss.sonatype.org/service/local/staging/deploy/maven2/
-
+ -->
@@ -328,19 +326,14 @@
- org.sonatype.plugins
- nexus-staging-maven-plugin
- ${nexus-staging-maven-plugin.version}
+ org.sonatype.central
+ central-publishing-maven-plugin
+ 0.8.0
true
-
-
-
-
-
- ossrh
- https://oss.sonatype.org/
- true
+ central
+ true
+ published