From 2935ccb4497a4384e97ba1efa0caf9cf600754de Mon Sep 17 00:00:00 2001
From: Jordan Hury <jordanh@jfrog.com>
Date: Sun, 8 Nov 2026 15:26:18 +0200
Subject: [PATCH] Resolve CI Maven and Gradle dependencies through a JFrog
 mirror

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/actions/install-and-setup/action.yml | 16 ++++++++++++++++
 .github/workflows/test.yml                   |  1 +
 2 files changed, 17 insertions(+)

diff --git a/.github/actions/install-and-setup/action.yml b/.github/actions/install-and-setup/action.yml
index 6d0575d2a..c0f1571c7 100644
--- a/.github/actions/install-and-setup/action.yml
+++ b/.github/actions/install-and-setup/action.yml
@@ -132,3 +132,19 @@ runs:
       run: |
         echo "JAVA_HOME=$env:JAVA_HOME_11_X64" >> $env:GITHUB_ENV
         echo "$env:JAVA_HOME_11_X64\bin" >> $env:GITHUB_PATH
+
+    - name: Setup JFrog CLI for Maven and Gradle resolution
+      if: github.repository_owner == 'jfrog' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+      uses: jfrog/setup-jfrog-cli@v5
+      env:
+        JF_URL: https://xray-dev.jfrogdev.org
+      with:
+        oidc-provider-name: github-oss-ci
+        disable-auto-build-publish: true
+        disable-job-summary: true
+    - name: Resolve Maven and Gradle dependencies through JFrog
+      if: github.repository_owner == 'jfrog' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+      shell: bash
+      run: |
+        jf setup maven --repo oss-maven-virtual
+        jf setup gradle --repo oss-maven-virtual
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8c572c757..84fefd4ba 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,6 +3,7 @@ name: JFrog CLI Security Tests
 permissions:
   actions: read
   contents: read
+  id-token: write
   pull-requests: write
 
 on: