⚙️ Consolidated review batch: approved Jules PRs #42
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ master, main ] | |
| pull_request: | |
| branches: [ master, main ] | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| name: Build and Test (Java ${{ matrix.java }}) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| checks: write | |
| strategy: | |
| matrix: | |
| java: [ '21', '22', '23' ] | |
| fail-fast: false | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 (SHA-pinned) | |
| - name: Set up JDK ${{ matrix.java }} | |
| uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 (SHA-pinned) | |
| with: | |
| distribution: 'temurin' | |
| java-version: ${{ matrix.java }} | |
| cache: 'gradle' | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Build with Gradle | |
| run: ./gradlew build --no-daemon --stacktrace | |
| - name: Run tests | |
| run: ./gradlew test --no-daemon --stacktrace | |
| - name: Generate code coverage report | |
| if: matrix.java == '21' | |
| run: ./gradlew jacocoTestReport --no-daemon | |
| - name: Upload coverage to Codecov | |
| if: matrix.java == '21' | |
| uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6 (SHA-pinned) | |
| with: | |
| files: ./build/reports/jacoco/test/jacocoTestReport.xml | |
| flags: unittests | |
| name: codecov-umbrella | |
| fail_ci_if_error: false | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| - name: Archive test results | |
| if: always() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 (SHA-pinned) | |
| with: | |
| name: test-results-java-${{ matrix.java }} | |
| path: | | |
| **/build/reports/tests/ | |
| **/build/test-results/ | |
| retention-days: 7 | |
| - name: Archive code coverage results | |
| if: matrix.java == '21' | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 (SHA-pinned) | |
| with: | |
| name: code-coverage-report | |
| path: build/reports/jacoco/ | |
| retention-days: 7 | |
| # Job for dependency vulnerability scanning | |
| dependency-check: | |
| name: Dependency Security Check | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 (SHA-pinned) | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 (SHA-pinned) | |
| with: | |
| distribution: 'temurin' | |
| java-version: '21' | |
| cache: 'gradle' | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Run dependency check | |
| run: ./gradlew dependencies --no-daemon |