GA: Fjerner snyk og oppdarer codeql + release

.github/dependabot.yml

@@ -1,12 +1,21 @@
 version: 2
+registries:
+  maven-github:
+    type: maven-repository
+    url: https://maven.pkg.github.com/navikt/fp-felles
+    username: x-access-token
+    password: ${{ secrets.READER_TOKEN }}
+
 updates:
-  - package-ecosystem: maven
+  - package-ecosystem: github-actions
     directory: "/"
     schedule:
       interval: daily
     open-pull-requests-limit: 10
-  - package-ecosystem: github-actions
+  - package-ecosystem: maven
     directory: "/"
+    registries:
+      - maven-github
     schedule:
       interval: daily
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 20

.github/workflows/codeql.yml

@@ -0,0 +1,21 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+  schedule:
+    - cron: '0 0 * * 0,4'
+
+jobs:
+  codeql:
+   name: CodeQl
+   permissions:
+     actions: read
+     contents: read
+     security-events: write
+   uses: navikt/fp-gha-workflows/.github/workflows/codeql.yml@main
+   with:
+     config-file: ./.github/codeql/codeql-config.yml
+   secrets: inherit

.github/workflows/release.yml

@@ -1,38 +1,13 @@
 name: Publish release
-
-env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  GITHUB_USERNAME: x-access-token
-
 on:
   release:
-    types: [published]
+    types: [ published ]
 
 jobs:
-  publish-release:
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout latest code
-        uses: actions/checkout@v3
-
-      - name: Setup maven
-        uses: whelk-io/maven-settings-xml-action@v21
-        with:
-          repositories: '[{ "id": "github", "name": "github", "url": "https://maven.pkg.github.com/${{ github.repository }}", "releases": { "enabled": "true" }, "snapshots": { "enabled": "false" } }]'
-          servers: '[{ "id": "github", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}" }]'
-          output_file: settings.xml
-
-      - name: Set up JDK
-        uses: actions/[email protected]
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-          cache: 'maven'
-      - name: Publish artifact
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_VERSION: ${{ github.event.release.tag_name }}
-        run: |
-          mvn -B -s settings.xml versions:set -DnewVersion="${NEW_VERSION}" -DgenerateBackupPoms=false
-          mvn -B -s settings.xml clean deploy 
+  release:
+    name: Feature
+    uses: navikt/fp-gha-workflows/.github/workflows/release-feature.yml@main
+    with:
+      release-version: ${{ github.event.release.tag_name }}
+      release-profiles: ''
+    secrets: inherit