From 121253786d92a43eb4241d8fb077169bba1154d5 Mon Sep 17 00:00:00 2001
From: Oliver Weyhmueller <oliver@weyhmueller.de>
Date: Tue, 7 Jan 2025 12:26:44 +0100
Subject: [PATCH] feat: change to setup-maven-action

---
 action.yml | 29 ++++++++++-------------------
 1 file changed, 10 insertions(+), 19 deletions(-)

diff --git a/action.yml b/action.yml
index a4e2670..35e1c55 100644
--- a/action.yml
+++ b/action.yml
@@ -52,10 +52,15 @@ runs:
       with:
         syft-version: "v1.18.1"
 
-    - name: "maven-settings-xml-action"
-      uses: "https://github.com/whelk-io/maven-settings-xml-action@v22"
+    - name: "Setup Java and Maven"
+      uses: "https://github.com/s4u/setup-maven-action@v1.18.0"
       with:
-        repositories: >
+        checkout-fetch-depth: 0
+        java-distribution: "temurin"
+        java-version: 21
+        cache: "maven"
+        maven-version: 3.9.9
+        settings-repositories: >
           [
             {
               "id": "maven-releases",
@@ -88,7 +93,7 @@ runs:
               }
             }
           ]
-        servers: >
+        settings-servers: >
           [
             {
               "id": "maven-group",
@@ -111,7 +116,7 @@ runs:
               "password": "${{ env.VULNZ_PASSWORD }}"
             }
           ]
-        mirrors: >
+        settings-mirrors: >
           [
             {
               "id": "maven-group",
@@ -120,20 +125,6 @@ runs:
               "url": "https://nexus.w9r.dev/repository/maven-group/"
             }
           ]
-        plugin_groups: >
-          [
-            "org.sonarsource.scanner.maven"
-          ]
-        output_file: /root/.m2/settings.xml
-
-    - name: "Setup Java"
-      uses: "https://github.com/actions/setup-java@v4"
-      with:
-        distribution: "temurin"
-        java-version: 21
-        cache: "maven"
-        check-latest: true
-
 
     - name: "Import Commit Signing GPG key"
       id: "import-gpg"