chore: [TRX-19] migrate upstream GitHub workflows and configs (#2)

(cherry picked from commit 32beedaff3a4db9a5ad3e2d72904bb70472e54f1)

.github/workflows/cucumber-integration-test-UMBRELLA.yaml

@@ -44,7 +44,7 @@ concurrency:
 
 jobs:
   execute-e2e-tests:
-    runs-on: tractusx-runner
+    runs-on: "${{ github.repository == 'eclipse-tractusx/item-relationship-service' && 'tractusx-runner' || 'ubuntu-latest' }}"
     steps:
       - uses: actions/checkout@v4
 

.github/workflows/irs-build.yml

@@ -165,6 +165,10 @@ jobs:
 
   trigger-trivy-image-scan:
     if: github.event_name != 'pull_request'
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     needs:
       - build_images
     uses: ./.github/workflows/trivy-docker-hub-scan.yml

.github/workflows/release.yaml

@@ -73,7 +73,7 @@ jobs:
 
           # insert new comparison below uppermost one
           sed -i "$((latest_comparison_url_line_number+1)) s|^|[${{ inputs.irs-version }}]: \
-          https://github.com/eclipse-tractusx/item-relationship-service/compare/$previous_irs_version...${{ inputs.irs-version }}\n|" ${{ env.CHANGELOG_PATH }}        
+          ${{ github.server_url }}/${{ github.repository }}/compare/$previous_irs_version...${{ inputs.irs-version }}\n|" ${{ env.CHANGELOG_PATH }}        
 
           # replace placeholder
           placeholder_line_number=$(cat -n ${{ env.CHANGELOG_PATH }} | grep -Eoi "[0-9]+.## \[Unreleased\]" | grep -Eo "[0-9]+")

.github/workflows/tavern-UMBRELLA.yml

@@ -31,7 +31,7 @@ concurrency:
 
 jobs:
   test:
-    runs-on: tractusx-runner
+    runs-on: "${{ github.repository == 'eclipse-tractusx/item-relationship-service' && 'tractusx-runner' || 'ubuntu-latest' }}"
     steps:
       - uses: actions/checkout@v4