Merge remote-tracking branch 'origin' into malwarescan-async-scan

* origin: (61 commits)
  fix(deps):update python to v3.10 for pythonBuild (SAP#5468)
  ABAP assemblePackages Alternative phase name (SAP#5469)
  feat: add pnpm to path after installation (SAP#5465)
  fix: url encoding for branch, repo name (SAP#5466)
  fix(logging): shorten secret not resolved message and attach param.name to it (SAP#5467)
  Revert "ci(release): update/create dynamic tags with each release" (SAP#5456)
  feat(CxOne): Scan summary in PR (SAP#5464)
  fix(sonar): Fix null value for errors entry in sonarscan report (SAP#5459)
  feat(codeqlExecuteScan): multi language support (SAP#5462)
  fix: handle dockerImage from custom workflow inputs (SAP#5460)
  Fix influx counter for whitesource (SAP#5406)
  docs: error patterns in steps (SAP#5455)
  ci(release): update/create dynamic tags with each release (SAP#5454)
  feat: add GitHub Actions log format support and auto-detect environment (SAP#5450)
  fix(deps): Updated mtaBuild docker image (SAP#5419)
  Updated mavenBuild description (SAP#5439)
  deprecate 'useDetect8' (SAP#5443)
  Revert "chore(cloudFoundryDeploy): deployDescriptor stash resource" (SAP#5444)
  chore(cloudFoundryDeploy): deployDescriptor stash resource (SAP#5302)
  feat: introducing json encoder with escape html for event (SAP#5442)
  ...

Author: maxatsap

.github/CODEOWNERS

@@ -66,6 +66,13 @@ AscAppUpload*                                   @Mau04 @inf2381
 credentialdiggerScan*                           @SAP/credential-digger-members @SAP/credential-digger-admins 
 CredentialdiggerScan*                           @SAP/credential-digger-admins @SAP/credential-digger-members 
 
+detectExecuteScan*                              @SAP/oss-team
+DetectExecuteScan*                              @SAP/oss-team
+whitesourceExecuteScan*                         @SAP/oss-team
+WhitesourceExecuteScan*                         @SAP/oss-team
+protecodeExecuteScan*                           @SAP/oss-team
+ProtecodeExecuteScan*                           @SAP/oss-team
+
 #####################
 # Integration tests #
 #####################
@@ -88,6 +95,10 @@ integration/testdata/TestCnbIntegration/        @SAP/jenkins-library-cnb
 /pkg/abap/                                      @SAP/jenkins-library-abap
 /pkg/abaputils/                                 @SAP/jenkins-library-abap
 
+/pkg/blackduck/                                 @SAP/oss-team
+/pkg/whitesource/                               @SAP/oss-team
+/pkg/protecode/                                 @SAP/oss-team
+
 ####################
 # Misc             #
 ####################

.github/renovate.json

@@ -3,26 +3,107 @@
     "extends": [
         "config:base"
     ],
-    "ignorePaths": [
-        "integration/testdata/**",
-        "test/resources/**"
-    ],
     "labels": [
         "dependencies"
     ],
     "packageRules": [
         {
             "description": "Create PRs to roll back Go module if the current version is not found in the registry.",
             "matchManagers": ["gomod"],
-            "rollbackPrs": true
+            "rollbackPrs": true,
+            "matchPaths": [
+                "!integration/testdata/**",
+                "!test/resources/**"
+            ]
         },
         {
             "description": "Automerge patch version updates for Go modules (except versions 0.x as they could have breaking changes)",
             "matchManagers": ["gomod"],
             "matchUpdateTypes": ["patch"],
             "matchCurrentVersion": "!/^(v?0)/",
             "automerge": true,
-            "addLabels": ["renovate-automerge"]
+            "addLabels": ["renovate-automerge"],
+            "matchPaths": [
+                "!integration/testdata/**",
+                "!test/resources/**"
+            ]
+        }
+    ],
+    "customManagers": [
+        {
+            "customType": "regex",
+            "matchStringsStrategy": "any",
+            "managerFilePatterns": [
+                "cmd\/golangBuild.go"
+            ],
+            "matchStrings": [
+                "\"github.com\/CycloneDX\/(?<depName>cyclonedx-gomod)\/cmd\/cyclonedx-gomod@v(?<currentValue>[^\"]+)\""
+            ],
+            "depTypeTemplate": "dependencies",
+            "datasourceTemplate": "github-releases",
+            "depNameTemplate": "CycloneDX/{{{depName}}}",
+            "extractVersionTemplate": "v(?<version>.*)",
+            "autoReplaceStringTemplate": "\"github.com/{{{depName}}}/cmd/cyclonedx-gomod@v{{{newValue}}}\""
+        },
+        {
+            "customType": "regex",
+            "matchStringsStrategy": "any",
+            "managerFilePatterns": [
+                "cmd\/gradleExecuteBuild.go"
+            ],
+            "matchStrings": [
+                "\"org.cyclonedx:(?<depName>cyclonedx-gradle-plugin):(?<currentValue>[^\"\n]+)\""
+            ],
+            "depTypeTemplate": "dependencies",
+            "datasourceTemplate": "gradle-version",
+            "depNameTemplate": "org.cyclonedx:{{{depName}}}",
+            "extractVersionTemplate": "^(?<version>.*)",
+            "autoReplaceStringTemplate": "\"{{{depName}}}:{{{newValue}}}\""
+        },
+        {
+            "customType": "regex",
+            "matchStringsStrategy": "any",
+            "managerFilePatterns": [
+                "cmd\/mavenBuild.go"
+            ],
+            "matchStrings": [
+                "\"org.cyclonedx:(?<depName>cyclonedx-maven-plugin):(?<currentValue>[^\"]+)\""
+            ],
+            "depTypeTemplate": "dependencies",
+            "datasourceTemplate": "maven",
+            "depNameTemplate": "org.cyclonedx:{{{depName}}}",
+            "extractVersionTemplate": "^(?<version>.*)",
+            "autoReplaceStringTemplate": "\"{{{depName}}}:{{{newValue}}}\""
+        },
+        {
+            "customType": "regex",
+            "matchStringsStrategy": "any",
+            "managerFilePatterns": [
+                "integration\/testdata\/TestGradleIntegration\/java-project-with-bom-plugin\/build.gradle"
+            ],
+            "matchStrings": [
+                "id \"(?<depName>org.cyclonedx.bom)\" version \"(?<currentValue>.*)\""
+            ],
+            "depTypeTemplate": "dependencies",
+            "datasourceTemplate": "gradle-version",
+            "depNameTemplate": "{{depName}}",
+            "extractVersionTemplate": "(?<version>.*)",
+            "autoReplaceStringTemplate": "id \"{{depName}}\" version \"{{newValue}}\""
+        },
+        {
+            "customType": "regex",
+            "matchStringsStrategy": "any",
+            "managerFilePatterns": [
+                "integration\/integration_golang_test.go"
+            ],
+            "matchStrings": [
+                "\"github.com\/CycloneDX\/(?<depName>cyclonedx-gomod)\/cmd\/cyclonedx-gomod@v(?<currentValue>[^\"]+)\""
+            ],
+            "depTypeTemplate": "dependencies",
+            "datasourceTemplate": "github-releases",
+            "depNameTemplate": "CycloneDX/{{{depName}}}",
+            "extractVersionTemplate": "v(?<version>.*)",
+            "autoReplaceStringTemplate": "\"github.com/{{{depName}}}/cmd/cyclonedx-gomod@v{{{newValue}}}\""
         }
     ],
     "postUpdateOptions": [

.github/workflows/consumer-tests-pr.yml

@@ -28,16 +28,7 @@ jobs:
       - name: unit-test
         id: unit-test
         run: go test -tags=unit ./... -coverprofile cover.out
-      # run code coverage upload to code climate on main branch since PR branch will not have access to secret
-      - name: unit-test-code-climate-upload
-        if: ${{ (github.event_name != 'pull_request') || (github.event.pull_request.head.repo.full_name == github.repository) }}
-        uses: paambaati/codeclimate-action@v5
-        env:
-          CC_TEST_REPORTER_ID: ${{ secrets.CODE_CLIMATE_REPORTER_ID }}
-        with:
-          coverageLocations: cover.out:gocov
-          # truncate package name from file paths in report
-          prefix: github.com/SAP/jenkins-library/
+
   format:
     runs-on: ubuntu-latest
     steps: