chore: use shared org-level GitHub Actions and workflows

.github/actions/cf-bind/action.yml

@@ -21,36 +21,14 @@ inputs:
 runs:
   using: composite
   steps:
-    - name: Install CF CLI
-      shell: bash
-      env:
-        CF_CLI_VERSION: '8.18.3'
-      run: |
-        wget -q "https://packages.cloudfoundry.org/stable?release=linux64-binary&version=${CF_CLI_VERSION}&source=github-rel" -O cf-cli.tar.gz
-        tar -xzf cf-cli.tar.gz
-        sudo mv cf8 /usr/local/bin/cf
-        cf --version
-
     - name: CF Login
-      shell: bash
-      env:
-        CF_USERNAME: ${{ inputs.cf-username }}
-        CF_PASSWORD: ${{ inputs.cf-password }}
-        CF_API: ${{ inputs.cf-api }}
-        CF_ORG: ${{ inputs.cf-org }}
-        CF_SPACE: ${{ inputs.cf-space }}
-      run: |
-        for i in {1..5}; do
-          cf api "$CF_API" && \
-          cf auth && \
-          cf target -o "$CF_ORG" -s "$CF_SPACE" && break
-          if [ "$i" -eq 5 ]; then
-            echo "cf login failed after 5 attempts."
-            exit 1
-          fi
-          echo "cf login failed, retrying ($i/5)..."
-          sleep 10
-        done
+      uses: cap-java/.github/actions/cf-login@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
+      with:
+        cf-api: ${{ inputs.cf-api }}
+        cf-username: ${{ inputs.cf-username }}
+        cf-password: ${{ inputs.cf-password }}
+        cf-org: ${{ inputs.cf-org }}
+        cf-space: ${{ inputs.cf-space }}
 
     - name: Install @sap/cds-dk
       shell: bash

.github/workflows/issue.yml

@@ -9,23 +9,6 @@ on:
 
 jobs:
   label_issues:
-    runs-on: ubuntu-latest
+    uses: cap-java/.github/.github/workflows/issue.yml@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
     permissions:
       issues: write
-    steps:
-      - run: gh issue edit "$NUMBER" --add-label "$LABELS"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-          NUMBER: ${{ github.event.issue.number }}
-          LABELS: New
-
-      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
-        with:
-          script: |
-            await github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: `👋 Hello @${context.payload.issue.user.login}, thank you for submitting this issue. Our team is reviewing your report and will follow up with you as soon as possible.`
-            })

.github/workflows/main.yml

@@ -20,11 +20,13 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Scan With Black Duck
-        uses: ./.github/actions/scan-with-blackduck
+        uses: cap-java/.github/actions/scan-with-blackduck@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
         with:
           blackduck_token: ${{ secrets.BLACK_DUCK_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           maven-version: ${{ env.MAVEN_VERSION }}
+          project-name: com.sap.cds.cds-ai
+          included-modules: cds-feature-ai-core,cds-feature-recommendations,cds-starter-ai
           scan_mode: FULL
 
   build-and-test:

.github/workflows/pipeline.yml

@@ -210,8 +210,9 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: CodeQL Analysis
-        uses: ./.github/actions/scan-with-codeql
+        uses: cap-java/.github/actions/scan-with-codeql@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
         with:
           java-version: '17'
           maven-version: ${{ env.MAVEN_VERSION }}
           language: ${{ matrix.language }}
+          queries: security-extended

.github/workflows/prevent-issue-labeling.yml

@@ -8,18 +8,6 @@ on:
 
 jobs:
   remove_new_label:
-    runs-on: ubuntu-latest
+    uses: cap-java/.github/.github/workflows/prevent-issue-labeling.yml@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
     permissions:
       issues: write
-    steps:
-      - name: Remove "New" label if applied by non-bot user
-        if: >
-          contains(github.event.issue.labels.*.name, 'New') &&
-          github.event.label.name == 'New' &&
-          github.event.sender.login != 'github-actions[bot]'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-          ISSUE_NUMBER: ${{ github.event.issue.number }}
-        run: |
-          gh issue edit "$ISSUE_NUMBER" --remove-label "New"

.github/workflows/release.yml

@@ -71,11 +71,13 @@ jobs:
           ref: ${{ github.event.release.tag_name }}
 
       - name: Scan With Black Duck
-        uses: ./.github/actions/scan-with-blackduck
+        uses: cap-java/.github/actions/scan-with-blackduck@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
         with:
           blackduck_token: ${{ secrets.BLACK_DUCK_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           maven-version: ${{ env.MAVEN_VERSION }}
+          project-name: com.sap.cds.cds-ai
+          included-modules: cds-feature-ai-core,cds-feature-recommendations,cds-starter-ai
           version: ${{ github.event.release.tag_name }}
 
   build:
@@ -92,10 +94,11 @@ jobs:
           ref: ${{ github.event.release.tag_name }}
 
       - name: Build
-        uses: ./.github/actions/build
+        uses: cap-java/.github/actions/build@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
         with:
           java-version: ${{ env.JAVA_VERSION }}
           maven-version: ${{ env.MAVEN_VERSION }}
+          maven-args: "-P '!with-integration-tests'"
 
   deploy:
     name: Deploy to Maven Central
@@ -112,12 +115,13 @@ jobs:
           ref: ${{ github.event.release.tag_name }}
 
       - name: Deploy
-        uses: ./.github/actions/deploy-release
+        uses: cap-java/.github/actions/deploy-release@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main
         with:
           user: ${{ secrets.CENTRAL_REPOSITORY_USER }}
           password: ${{ secrets.CENTRAL_REPOSITORY_PASS }}
-          pgp-pub-key: ${{ secrets.PGP_PUBKEY_ID }}
-          pgp-private-key: ${{ secrets.PGP_PRIVATE_KEY }}
-          pgp-passphrase: ${{ secrets.PGP_PASSPHRASE }}
+          gpg-pub-key: ${{ secrets.PGP_PUBKEY_ID }}
+          gpg-private-key: ${{ secrets.PGP_PRIVATE_KEY }}
+          gpg-passphrase: ${{ secrets.PGP_PASSPHRASE }}
           revision: ${{ github.event.release.tag_name }}
           maven-version: ${{ env.MAVEN_VERSION }}
+          maven-profiles: "deploy-release,'!with-integration-tests'"