Merge pull request #9 from jenkinsci/work

Update "plugin" to 4.36 and setup security scanning

.github/release-drafter.yml

@@ -1,3 +1 @@
 _extends: .github
-tag-template: $NEXT_PATCH_VERSION
-version-template: $MAJOR.$MINOR.$PATCH

.github/workflows/cd.yaml

@@ -47,8 +47,8 @@ jobs:
       - name: Set up JDK 8
         uses: actions/setup-java@v2.5.0
         with:
-          distribution: 'adopt'
-          java-version: 8
+          distribution: 'temurin'
+          java-version: 11
       - name: Release
         uses: jenkins-infra/jenkins-maven-cd-action@v1.2.0
         with:

.github/workflows/jenkins-security-scan.yml

@@ -0,0 +1,15 @@
+name: Jenkins Security Scan
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    types: [ opened, synchronize, reopened ]
+  workflow_dispatch:
+
+jobs:
+  security-scan:
+    uses: jenkins-infra/jenkins-security-scan/.github/workflows/jenkins-security-scan.yaml@v1
+    with:
+      java-cache: '' # Optionally enable use of a build dependency cache. Specify 'maven' or 'gradle' as appropriate.
+      java-version: 11 # What version of Java to set up for the build.

pom.xml

@@ -30,7 +30,7 @@ THE SOFTWARE.
   <parent>
     <groupId>org.jenkins-ci.plugins</groupId>
     <artifactId>plugin</artifactId>
-    <version>4.35</version>
+    <version>4.36</version>
     <relativePath />
   </parent>