fix(err-msg): attempt to fix #4678

.github/CODEOWNERS

@@ -1,2 +1,21 @@
-*               @centreon/perl-reviewers
-.github/        @centreon/perl-reviewers @centreon/automation-reviewers
+*                   @centreon/owners-connectors
+
+*.md                @centreon/owners-doc
+*.mdx               @centreon/owners-doc
+
+*.cmake             @centreon/owners-cpp
+CMakeLists.txt      @centreon/owners-cpp
+Makefile            @centreon/owners-cpp
+
+*.pm                @centreon/owners-perl
+*.pl                @centreon/owners-perl
+
+*.py                @centreon/owners-python
+
+*.sh                @centreon/owners-bash
+
+tests/**            @centreon/owners-robot-e2e
+
+.github/**          @centreon/owners-pipelines
+packaging/**        @centreon/owners-pipelines
+selinux/**          @centreon/owners-pipelines

.github/actions/deb-delivery-legacy/action.yml

@@ -24,13 +24,13 @@
   using: "composite"
   steps:
     - name: Use cache DEB files
-      uses: actions/cache/restore@v3
+      uses: actions/cache/restore@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ./*.deb
         key: ${{ inputs.cache_key }}
         fail-on-cache-miss: true
 
-    - uses: jfrog/setup-jfrog-cli@v3
+    - uses: jfrog/setup-jfrog-cli@901bb9632db90821c2d3f076012bdeaf66598555 # v3.4.1
       env:
         JF_URL: https://centreon.jfrog.io
         JF_ACCESS_TOKEN: ${{ inputs.artifactory_token }}

.github/actions/deb-delivery/action.yml

@@ -20,14 +20,18 @@
 runs:
   using: "composite"
   steps:
+    - name: Remove previously delivered DEBs
+      run: rm -f ./*.deb
+      shell: bash
+
     - name: Use cache DEB files
-      uses: actions/cache/restore@v3
+      uses: actions/cache/restore@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ./*.deb
         key: ${{ inputs.cache_key }}
         fail-on-cache-miss: true
 
-    - uses: jfrog/setup-jfrog-cli@v3
+    - uses: jfrog/setup-jfrog-cli@901bb9632db90821c2d3f076012bdeaf66598555 # v3.4.1
       env:
         JF_URL: https://centreon.jfrog.io
         JF_ACCESS_TOKEN: ${{ inputs.artifactory_token }}

.github/actions/package-nfpm/action.yml

@@ -0,0 +1,120 @@
+name: package-nfpm
+description: Package module using nfpm
+inputs:
+  nfpm_file_pattern:
+    description: The pattern of the nfpm configuration file(s)
+    required: true
+  package_extension:
+    description: The package extension (deb or rpm)
+    required: true
+  distrib:
+    description: The package distrib
+    required: true
+  major_version:
+    description: The major version
+    required: false
+  minor_version:
+    description: The minor version
+    required: false
+  release:
+    description: The package release number
+    required: false
+  arch:
+    description: The package architecture
+    required: false
+  commit_hash:
+    description: The commit hash
+    required: true
+  cache_key:
+    description: The package files cache key
+    required: true
+  rpm_gpg_key:
+    description: The rpm gpg key
+    required: true
+  rpm_gpg_signing_key_id:
+    description: The rpm gpg signing key identifier
+    required: true
+  rpm_gpg_signing_passphrase:
+    description: The rpm gpg signing passphrase
+    required: true
+
+runs:
+  using: composite
+
+  steps:
+    - name: Remove previously packaged DEBs and RPMs
+      run: |
+        rm -f ./*.deb
+        rm -f ./*.rpm
+      shell: bash
+
+    - name: Import gpg key
+      env:
+        RPM_GPG_SIGNING_KEY: ${{ inputs.rpm_gpg_key }}
+      run: echo -n "$RPM_GPG_SIGNING_KEY" > key.gpg
+      shell: bash
+
+    - name: Build ${{ inputs.package_extension }} files
+      env:
+        RPM_GPG_SIGNING_KEY_ID: ${{ inputs.rpm_gpg_signing_key_id }}
+        RPM_GPG_SIGNING_PASSPHRASE: ${{ inputs.rpm_gpg_signing_passphrase }}
+      run: |
+        export MAJOR_VERSION="${{ inputs.major_version }}"
+        export VERSION="${{ inputs.major_version }}.${{ inputs.minor_version }}"
+        export RELEASE="${{ inputs.release }}"
+        export ARCH="${{ inputs.arch }}"
+
+        if  [ "${{ inputs.package_extension }}" = "rpm" ]; then
+          export DIST=".${{ inputs.distrib }}"
+          export APACHE_USER="apache"
+          export APACHE_GROUP="apache"
+        else
+          export DIST=""
+          export APACHE_USER="www-data"
+          export APACHE_GROUP="www-data"
+        fi
+
+        MAJOR_LEFT=$( echo $MAJOR_VERSION | cut -d "." -f1 )
+        MAJOR_RIGHT=$( echo $MAJOR_VERSION | cut -d "-" -f1 | cut -d "." -f2 )
+        BUMP_MAJOR_RIGHT=$(( MAJOR_RIGHT_PART + 1 ))
+        if [ "$MAJOR_RIGHT" = "04" ]; then
+          BUMP_MAJOR_LEFT="$MAJOR_LEFT"
+          BUMP_MAJOR_RIGHT="10"
+        else
+          BUMP_MAJOR_LEFT=$(( $MAJOR_LEFT + 1 ))
+          BUMP_MAJOR_RIGHT="04"
+        fi
+
+        export NEXT_MAJOR_VERSION="$BUMP_MAJOR_LEFT.$BUMP_MAJOR_RIGHT"
+
+        export RPM_SIGNING_KEY_FILE="$(pwd)/key.gpg"
+        export RPM_SIGNING_KEY_ID="$RPM_GPG_SIGNING_KEY_ID"
+        export NFPM_RPM_PASSPHRASE="$RPM_GPG_SIGNING_PASSPHRASE"
+
+        for FILE in ${{ inputs.nfpm_file_pattern }}; do
+          DIRNAME=$(dirname $FILE)
+          BASENAME=$(basename $FILE)
+          cd $DIRNAME
+          sed -i "s/@APACHE_USER@/$APACHE_USER/g" $BASENAME
+          sed -i "s/@APACHE_GROUP@/$APACHE_GROUP/g" $BASENAME
+          sed -i "s/@COMMIT_HASH@/${{ inputs.commit_hash }}/g" $BASENAME
+          nfpm package --config $BASENAME --packager ${{ inputs.package_extension }}
+          cd -
+          mv $DIRNAME/*.${{ inputs.package_extension }} ./
+        done
+      shell: bash
+
+    - name: Cache packages
+      uses: actions/cache/save@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
+      with:
+        path: ./*.${{ inputs.package_extension }}
+        key: ${{ inputs.cache_key }}
+
+    # Update if condition to true to get packages as artifacts
+    - if: ${{ false }}
+      name: Upload package artifacts
+      uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      with:
+        name: packages-${{ inputs.distrib }}
+        path: ./*.${{ inputs.package_extension}}
+        retention-days: 1

.github/actions/package/action.yml

@@ -72,14 +72,14 @@
       shell: bash
 
     - name: Upload package artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
       with:
         name: packages-${{ inputs.distrib }}
         path: ./*.${{ inputs.package_extension }}
         retention-days: 1
 
     - name: Cache packages
-      uses: actions/cache/save@v3
+      uses: actions/cache/save@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ./*.${{ inputs.package_extension }}
         key: ${{ inputs.cache_key }}

.github/actions/promote-to-stable/action.yml

@@ -0,0 +1,96 @@
+name: "promote testing to stable"
+description: "Promote testing packages to stable."
+inputs:
+  artifactory_token:
+    description: "Artifactory token"
+    required: true
+  module:
+    description: "Module"
+    required: true
+  distrib:
+    description: "The distribution used for packaging"
+    required: true
+  stability:
+    description: "The package stability (stable, testing, unstable)"
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - uses: jfrog/setup-jfrog-cli@901bb9632db90821c2d3f076012bdeaf66598555 # v3.4.1
+      env:
+        JF_URL: https://centreon.jfrog.io
+        JF_ACCESS_TOKEN: ${{ inputs.artifactory_token }}
+
+    - name: Promote RPM packages to stable
+      if: ${{ startsWith(inputs.distrib, 'el') }}
+      run: |
+        set -x
+        echo "[DEBUG] - Distrib: ${{ inputs.distrib }}"
+
+        for ARCH in "noarch" "x86_64"; do
+          echo "[DEBUG] - Get path of $ARCH testing artifacts to promote to stable."
+          SRC_PATHS=$(jf rt s --include-dirs rpm-plugins/${{ inputs.distrib }}/testing/$ARCH/${{ inputs.module }}/*.rpm | jq -r '.[].path')
+
+          if [[ ${SRC_PATHS[@]} ]]; then
+            for SRC_PATH in ${SRC_PATHS[@]}; do
+              echo "[DEBUG] - Source path found: $SRC_PATH"
+            done
+          else
+            echo "[DEBUG] - No source path found."
+            continue
+          fi
+
+          echo "[DEBUG] - Build $ARCH target path."
+          TARGET_PATH="rpm-plugins/${{ inputs.distrib }}/${{ inputs.stability }}/$ARCH/RPMS/${{ inputs.module }}/"
+          echo "[DEBUG] - Target path: $TARGET_PATH"
+
+          echo "[DEBUG] - Promoting $ARCH testing artifacts to stable."
+          for ARTIFACT in ${SRC_PATHS[@]}; do
+            echo "[DEBUG] - Downloading $ARTIFACT from TESTING."
+            jf rt download $ARTIFACT --flat
+          done
+          for ARTIFACT_DL in $(dir|grep -E "*.rpm"); do
+            echo "[DEBUG] - Promoting (upload) $ARTIFACT_DL to stable $TARGET_PATH."
+            jf rt upload "$ARTIFACT_DL" "$TARGET_PATH" --flat
+          done
+          rm -f *.rpm
+        done
+
+      shell: bash
+
+    - name: Promote DEB package to stable
+      if: ${{ startsWith(inputs.distrib, 'bullseye') }}
+      run: |
+        echo "[DEBUG] - Distrib: ${{ inputs.distrib }}"
+
+        echo "[DEBUG] - Get path of testing DEB packages to promote to stable."
+        SRC_PATHS=$(jf rt s --include-dirs apt-plugins-testing/pool/${{ inputs.module }}/*.deb | jq -r '.[].path')
+
+        if [[ ${SRC_PATHS[@]} ]]; then
+          for SRC_PATH in ${SRC_PATHS[@]}; do
+            echo "[DEBUG] - Source path found: $SRC_PATH"
+          done
+        else
+          echo "[DEBUG] - No source path found."
+          continue
+        fi
+
+        echo "[DEBUG] - Build target path."
+        TARGET_PATH="apt-plugins-${{ inputs.stability }}/pool/${{ inputs.module }}/"
+        echo "[DEBUG] - Target path: $TARGET_PATH"
+
+        echo "[DEBUG] - Promoting DEB testing artifacts to stable."
+        for ARTIFACT in ${SRC_PATHS[@]}; do
+          echo "[DEBUG] - Downloading $ARTIFACT from TESTING."
+          jf rt download $ARTIFACT --flat
+        done
+
+        for ARTIFACT_DL in $(dir|grep -E "*.deb"); do
+          ARCH=$(echo $ARTIFACT_DL | cut -d '_' -f3 | cut -d '.' -f1)
+          echo "[DEBUG] - Promoting (upload) $ARTIFACT_DL to stable $TARGET_PATH."
+          jf rt upload "$ARTIFACT_DL" "$TARGET_PATH" --deb "${{ inputs.distrib }}/main/$ARCH"
+        done
+        rm -f *.deb
+
+      shell: bash

.github/actions/rpm-delivery-legacy/action.yml

@@ -24,13 +24,13 @@
   using: "composite"
   steps:
     - name: Use cache RPM files
-      uses: actions/cache/restore@v3
+      uses: actions/cache/restore@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ./*.rpm
         key: ${{ inputs.cache_key }}
         fail-on-cache-miss: true
 
-    - uses: jfrog/setup-jfrog-cli@v3
+    - uses: jfrog/setup-jfrog-cli@901bb9632db90821c2d3f076012bdeaf66598555 # v3.4.1
       env:
         JF_URL: https://centreon.jfrog.io
         JF_ACCESS_TOKEN: ${{ inputs.artifactory_token }}

.github/actions/rpm-delivery/action.yml

@@ -20,14 +20,18 @@ inputs:
 runs:
   using: "composite"
   steps:
+    - name: Remove previously delivered RPMs
+      run: rm -f ./*.rpm
+      shell: bash
+
     - name: Use cache RPM files
-      uses: actions/cache/restore@v3
+      uses: actions/cache/restore@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
       with:
         path: ./*.rpm
         key: ${{ inputs.cache_key }}
         fail-on-cache-miss: true
 
-    - uses: jfrog/setup-jfrog-cli@v3
+    - uses: jfrog/setup-jfrog-cli@901bb9632db90821c2d3f076012bdeaf66598555 # v3.4.1
       env:
         JF_URL: https://centreon.jfrog.io
         JF_ACCESS_TOKEN: ${{ inputs.artifactory_token }}
@@ -48,6 +52,7 @@ runs:
           exit 1
         fi
 
+        rm -rf noarch x86_64
         mkdir noarch x86_64
 
         for FILE in $FILES; do

.github/actions/runner-docker/action.yml

@@ -29,7 +29,7 @@
   using: "composite"
   steps:
     - name: Login to Registry (via runner)
-      uses: docker/login-action@v2
+      uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
       with:
         registry: ${{ inputs.registry_url }}
         username: ${{ inputs.registry_username }}

.github/dependabot.yml

@@ -0,0 +1,9 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    labels:
+      - 'pr: dependencies'

.github/workflows/actionlint.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Download actionlint
         id: get_actionlint
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Install Yaml
         run: |