feat: [DevOps] Update document-grounding specification

.github/workflows/fosstars-report.yml

@@ -1,4 +1,4 @@
-name: "Fosstars (Security)"
+name: "Security Rating & Vulnerability Scan"
 on:
   workflow_dispatch:
   schedule:
@@ -22,6 +22,12 @@ jobs:
       - name: "Checkout repository"
         uses: actions/checkout@v5
 
+      - name: "Run analysis"
+        uses: ossf/scorecard-action@v2.4.3
+        with:
+          results_file: results.sarif
+          results_format: sarif
+
       - name: "Setup java"
         uses: actions/setup-java@v5
         with:
@@ -75,13 +81,6 @@ jobs:
           path: ${{ env.CVE_CACHE_DIR }}
           key: ${{ env.CVE_CACHE_KEY }}
 
-      # This action changes the active branch!
-      - name: "Fosstars Rating"
-        uses: SAP/fosstars-rating-core-action@v1.14.0
-        with:
-          report-branch: fosstars-report
-          token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: "Slack Notification"
         if: failure()
         uses: slackapi/slack-github-action@v2.1.1

.github/workflows/weekly-spec-update.yaml

@@ -37,6 +37,21 @@ jobs:
           TOKEN: ${{ secrets.GH_TOOLS_TOKEN }}
 
 
+      - name: "Get orchestration version"
+        if: matrix.file == 'orchestration'
+        run: |
+          ORCH_VERSION=$(curl --silent --request GET --url "https://github.tools.sap/api/v3/repos/MLF-prod/mlf-gitops-prod/contents/services/llm-orchestration/source/Chart.yaml?ref=aws.eu-central-1.prod-eu/current" -H "Authorization: Bearer $TOKEN" -H "Accept: application/vnd.github.v3.raw" | grep 'version:' | awk '{print $2}')
+
+          if [ -z "$ORCH_VERSION" ]; then
+              echo "Failed to fetch orchestration version"
+              exit 1
+          fi
+          echo "Orchestration version: $ORCH_VERSION"
+          echo "ORCH_VERSION=$ORCH_VERSION" >> $GITHUB_ENV
+        env:
+          TOKEN: ${{ secrets.GH_TOOLS_TOKEN }}
+
+
       - name: "Trigger spec update"
         run: |
           BRANCH="main"