rework setup

build-and-test/action.yml

@@ -1,49 +1,46 @@
 name: gitea pipeline build
 
 inputs:
-  workflow_call:
   inputs:
     git_repository:
+      description: 'repository to clone'
       required: true
-        type: string
     java_version:
+      description: 'the Java Version to use'
       required: true
-        type: int
     java_distribution:
+      description: 'the java distribution to use'
       required: false
-        type: string
       default: "liberica"
     maven_version:
+      description: 'the maven version to use'
       required: false
-        type: string
+      default: '3.9.14'
-        default: 3.9.14
     sonar_host:
+      description: 'the sonar host to use'
       required: true
-        type: string
     dtrack_host_name:
+      description: 'the dtrack server to use'
       required: true
-        type: string
-        # dtrack.muehlencord.de
     dtrack_protocol:
+      description: 'the protocol to connect to the dtrack server, default to https'
       required: false
-        type: string
       default: "https"
     dtrack_port:
+      description: 'the port to connect to the dtrack server to, defaults to 443'
       required: false
-        type: string
       default: "443"
     dtrack_bom_file:
+      description: 'the location of the bom file'
       required: true
-        type: string
     dtrack_project_uuid:
+      description: 'the dtrack project id to use'
       required: true
-        type: string
+    sonar_token:
-    secrets:
+      description: 'the ssh key to use for checkout'
-      SSH_PRIVATE_KEY:
       required: true
-      SONAR_TOKEN:
+    dtrack_api_key:
-        required: true
+      description: 'the ssh key to use for checkout'
-      DTRACK_API_KEY:
       required: true
 
 runs:
@@ -71,15 +68,15 @@ runs:
     - name: Build with Maven
       working-directory: source
       shell: bash
-      run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ secrets.SONAR_TOKEN }}"
+      run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ inputs.sonar_token }}"
 
     - name: Upload SBOM to DTrack
       uses: DependencyTrack/gh-upload-sbom@v3
       with:
-        serverhostname: ${{ dtrack_host_name }}
+        serverhostname: ${{ inputs.dtrack_host_name }}
         protocol: ${{ inputs.dtrack_protocol }}
         port: ${{ inputs.dtrack_port }}
-        apikey: ${{ secrets.DTRACK_API_KEY }}
+        apikey: ${{ inpts.dtrack_api_key }}
         project: ${{ inputs.dtrack_project_uuid }}
         bomfilename: ${{ inputs.dtrack_bom_file }}