BUILD-11517 Update Jira Automation

[pavel-mikula-sonarsource]

These files should be similar to https://github.com/SonarSource/re-terraform-aws-vault/tree/master/.github/workflows, team-review-component value needs to be validated for each PR

The failed precommit looks like a false positive, sonar-xs exists.

[hashicorp-vault-sonar-prod]

BUILD-11517

[Copilot]

Pull request overview

This PR updates the repository’s GitHub Actions workflows used for Jira/PR review automation to align with the referenced re-terraform-aws-vault workflow setup, including switching to the sonar-xs runner label and updating Vault integration.

Changes:

• Switch workflow runners from github-ubuntu-latest-s to sonar-xs.
• Bump SonarSource/vault-action-wrapper from 3.2.0 to 3.6.1 (pinned by commit SHA).
• Add Rootly token wiring (Vault secret + action input) and set team-review-component for PR creation automation.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
.github/workflows/SubmitReview.yml	Uses sonar-xs runner and updates Vault action wrapper pin/version.
.github/workflows/RequestReview.yml	Uses sonar-xs, updates Vault wrapper, and adds ROOTLY_TOKEN + rootly-token input.
.github/workflows/PullRequestCreated.yml	Uses sonar-xs, updates Vault wrapper, adds Rootly token wiring, and sets team-review-component.
.github/workflows/PullRequestClosed.yml	Uses sonar-xs runner and updates Vault action wrapper pin/version.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[julien-carsique-sonarsource]

Gitar: add sonar-xs to actionlint

[gitar-bot]

Gitar: add sonar-xs to actionlint

Added sonar-xs to the self-hosted runner labels in .github/actionlint.yaml.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

Code Review ✅ Approved

Synchronizes Jira automation workflows with standard repository patterns to ensure consistent validation of the team-review-component value. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}