Story #12116: Improve GitHub Actions cache management

[marob]

Description

• Séparation des caches maven de l'action de Lint et de l'action de build/test (sinon, le cache du Lint ne comprenant que les dépendances Spotless était utilisé pour le build...)
• Utilisation de actions/cache au lieu de actions/setup-java pour la gestion du cache maven, ce qui permet :
  • de ne pas inclure les données owasp dependency-check dans le cache (on utilise un cache séparé)
  • d'utiliser un cache qui ne correspond pas exactement (hash différent parce que pom.xml modifié) pour accélérer le build (uniquement sur les branches non protégées)
• Cache séparé pour les données owasp dependency-check :
  • nouveau cache quotidien
  • repart du dernier cache si pas de cache du jour J
• Mise en cache des spotless-prettier-node-modules-* pour le Lint java
• Modification de la configuration des repository maven pour que le repository central soit utilisé par défaut (et celui de Vitam uniquement pour les dépendances Vitam)

Type de changement

• Build

Contributeur

• VAS (Vitam Accessible en Service)

[vitam-devops]

Checkmarx One – Scan Summary & Details – b8995933-61fd-4f73-a2ca-9a5ae25d6b8b

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Volume Has Sensitive Host Directory	/docker-compose.yml: 26	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/docker-compose.yml: 9	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/vitam-dev.yml: 25	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/vitam-dev.yml: 26	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/vitam-recette.yml: 20	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/docker-compose.yml: 10	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/vitam-dev.yml: 27	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/vitam-recette.yml: 57	Container has sensitive host directory mounted as a volume
	Volume Has Sensitive Host Directory	/docker-compose.yml: 25	Container has sensitive host directory mounted as a volume
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 55	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 142	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 147	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 98	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 79
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 128
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 61
	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 123