SONARSLANG-719 Finalize CI Migration (#581)

Author: GabrielFleischer

.cirrus.star

@@ -21,25 +21,32 @@ jobs:
     permissions:
       id-token: write  # Required for Vault OIDC authentication
       contents: write  # Required for repository access and tagging
+    outputs:
+      build-number: ${{ steps.build.outputs.BUILD_NUMBER }}
+      deployed: ${{ steps.build.outputs.deployed }}
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
         with:
           version: 2025.7.12
       - uses: SonarSource/ci-github-actions/build-gradle@v1
+        id: build
         with:
           artifactory-deploy-repo: sonarsource-public-qa
           deploy-pull-request: true
           use-develocity: true
 
   promote:
+    name: Promote
     needs:
       - build
+    if: ${{ needs.build.outputs.deployed }}
     runs-on: sonar-xs
-    name: Promote
     permissions:
       id-token: write  # Required for Vault OIDC authentication
       contents: write  # Required for repository access and tagging
+    env:
+      BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
     steps:
       - uses: SonarSource/ci-github-actions/promote@v1
         with:

.cirrus/.cirrus.yml

@@ -30,7 +30,7 @@ allprojects {
 
     ext {
         buildNumber = System.getProperty("buildNumber")
-        sonarLinksCi = 'https://cirrus-ci.com/github/SonarSource/slang'
+        sonarLinksCi = 'https://github.com/SonarSource/slang/actions/workflows/build.yml'
         sonarLinksScm = 'https://github.com/SonarSource/slang'
 
         artifactsToPublish = '' +
@@ -217,8 +217,7 @@ subprojects {
         def signingPassword = findProperty("signingPassword")
         useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
         required {
-            // TODO: switch to GitHub Actions or remove.
-            def branch = System.getenv()["CIRRUS_BRANCH"]
+            def branch = System.getenv()["GITHUB_REF_NAME"]
             return (branch == 'master' || branch ==~ 'branch-[\\d.]+') &&
                     gradle.taskGraph.hasTask(":artifactoryPublish")
         }
@@ -227,7 +226,7 @@ subprojects {
 
     tasks.withType(Sign) {
         onlyIf {
-            def branch = System.getenv()["CIRRUS_BRANCH"]
+            def branch = System.getenv()["GITHUB_REF_NAME"]
             return (branch == 'master' || branch ==~ 'branch-[\\d.]+') &&
                     gradle.taskGraph.hasTask(":artifactoryPublish")
         }