FAILED: Repository Linter Issue: rl-secret_rotation

A violation against the SAP Open Source standards have been detected.

Rule: rl-secret_rotation

Message: The following GitHub Actions secret has not been rotated within the last 12 months:

• ARTIFACTORY_COMMON_USER

Recommended actions:

1. Replace long-lived secrets with OIDC (OpenID Connect) tokens where possible
2. For required static credentials (API keys, tokens), rotate them at least annually
3. Review and remove any unused secrets

Description: Checks if all GitHub Actions secrets have been rotated within the last 12 months. Long-lived secrets should be replaced with OIDC tokens where possible, and required static credentials must be rotated annually.

Documentation

まず rl-secret_rotation ルールのドキュメントを確認し、ARTIFACTORY_COMMON_USER を使用している GitHub Actions の設定を調査します。Secret を OIDC に置き換えられるか、静的な認証情報が必要な場合は Secret をローテーションします。linter が Secret を 12 か月超として報告しなくなれば完了です。