GitHub Actions: Modernize pipelines

.github/workflows/gradle-wrapper-validation.yml

@@ -1,10 +1,9 @@
 name: "Validate Gradle Wrapper"
-on: [push, pull_request]
+on: [push]
 
 jobs:
   validation:
-    name: "Validation"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: gradle/wrapper-validation-action@v1

.github/workflows/main.yml

@@ -1,44 +1,38 @@
 name: Main CI
-
 on: [push]
 
 jobs:
   spotless:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v3
         with:
+          distribution: temurin
           java-version: 17
       - name: Run Spotless
         run: ./gradlew spotlessCheck
 
   build:
     runs-on: macos-12
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v3
         with:
+          distribution: temurin
           java-version: 17
       - name: Build with Gradle
         run: ./gradlew build
-      - name: Archive .gradle folder
-        uses: actions/upload-artifact@v1
-        with:
-          name: .gradle
-          path: .gradle
-      - name: Archive build folder
-        uses: actions/upload-artifact@v1
-        with:
-          name: build
-          path: build
-      - name: Archive kase64/build folder
-        uses: actions/upload-artifact@v1
+      - name: Archive build artifacts
+        uses: actions/upload-artifact@v3
         with:
           name: kase64_build
-          path: kase64/build
+          path: |
+            .gradle
+            build
+            kase64/build
 
   publish:
     needs: build
@@ -50,21 +44,14 @@ jobs:
       SONATYPE_GPG_KEY_PASSWORD: ${{ secrets.SONATYPE_GPG_KEY_PASSWORD }}
       SECRETS_KEY: ${{ secrets.SECRETS_KEY }}
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v4
       - name: Set up JDK 17
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@v3
         with:
+          distribution: temurin
           java-version: 17
-      - name: Download .gradle folder
-        uses: actions/download-artifact@v1
-        with:
-          name: .gradle
-      - name: Download build folder
-        uses: actions/download-artifact@v1
-        with:
-          name: build
-      - name: Download kase64/build folder
-        uses: actions/download-artifact@v1
+      - name: Download build artifacts
+        uses: actions/download-artifact@v3
         with:
           name: kase64_build
       - name: Publish to Sonatype (Maven Central)

.github/workflows/mobsf.yml

@@ -1,42 +1,23 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-
 name: MobSF
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]  
-  schedule:
-    - cron: '22 8 * * 0'
-
-permissions:
-  contents: read
+on: [push]
 
 jobs:
   mobile-security:
     permissions:
       contents: read # for actions/checkout to fetch code
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
     runs-on: ubuntu-latest
-
     steps:
-      - uses: actions/checkout@v2
-
-      - name: Setup python
-        uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+      - name: Setup Python 3.10
+        uses: actions/setup-python@v4
         with:
-          python-version: 3.8
-
+          python-version: 3.10
       - name: Run mobsfscan
         uses: MobSF/mobsfscan@a60d10a83af68e23e0b30611c6515da604f06f65
         with:
           args: . --sarif --output results.sarif || true
-
       - name: Upload mobsfscan report
         uses: github/codeql-action/upload-sarif@v2
         with:
-          sarif_file: results.sarif
+          sarif_file: results.sarif