chore: Use workflows of https://github.com/cap-java/.github

.github/workflows/blackduck.yml

@@ -26,8 +26,16 @@ jobs:
       - name: Checkout
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Scan With Black Duck
-        uses: ./.github/actions/scan-with-blackduck
+        uses: cap-java/.github/actions/scan-with-blackduck@main
         with:
           blackduck_token: ${{ secrets.BLACK_DUCK_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           maven-version: ${{ env.MAVEN_VERSION }}
+          project-name: com.sap.cds.feature.console
+          included-modules: cds-feature-console
+          # scan_mode and rapid_compare_mode determine the type of scan to perform
+          # FULL scan on main, RAPID scan on a PR that will only tag issues introduced by the PR
+          # not pre-existing issues that could have appeared in the main branch in the meantime
+          scan_mode: ${{ github.event_name == 'pull_request' && 'RAPID' || 'FULL' }}
+          rapid_compare_mode: ${{ github.event_name == 'pull_request' && 'BOM_COMPARE' || '' }}
+          excluded-dirs: '**/*test*,**/target/site'

.github/workflows/build.yml

@@ -36,8 +36,10 @@ jobs:
           sonarq-token: ${{ secrets.SONAR_TOKEN }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: CodeQL Scan
-        uses: ./.github/actions/scan-with-codeql
+        uses: cap-java/.github/actions/scan-with-codeql@main
         if: matrix.java-version == '21.0.9'
         with:
           java-version: 21
           maven-version: ${{ env.MAVEN_VERSION }}
+          language: java-kotlin
+          queries: security-extended

pom.xml

@@ -43,7 +43,7 @@
     <maven.compiler.release>${java.version}</maven.compiler.release>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
-    <cds.services.version>4.7.0</cds.services.version>
+    <cds.services.version>4.9.0</cds.services.version>
     <cds.url>https://cap.cloud.sap/docs/java</cds.url>
   </properties>