pull_requests.yml

name: Pull Requests

on: 
  pull_request:
    paths-ignore:
      - '**/*.md'
      - '**/*.txt'

jobs:
  build:
    name: Build dependency-check
    runs-on: ubuntu-latest 
    steps:
      - uses: actions/checkout@v2.4.0
      - name: Check Maven Cache
        id: maven-cache
        uses: actions/cache@v2.1.7
        with:
          path: ~/.m2/repository/
          key: mvn-repo
      - name: Set up JDK 1.8
        id: jdk-8
        uses: actions/setup-java@v2
        with:
          java-version: 8
          distribution: 'zulu'
      - uses: pnpm/action-setup@v2.0.1
        with:
          version: 6.0.2
      - name: Build with Maven
        id: build
        run: |
            mvn -s settings.xml clean package verify site -DreleaseTesting --no-transfer-progress --batch-mode
            mvn se.bjurr.violations:violation-comments-to-github-maven-plugin:violation-comments --no-transfer-progress --batch-mode -DpullRequestId=${{ github.event.pull_request.number }} -DoAuth2Token=${{ secrets.GITHUB_TOKEN }}
      - name: Archive IT test logs
        id: archive-logs
        uses: actions/upload-artifact@v2
        with:
          name: it-test-logs
          retention-days: 7
          path: maven/target/it/**/build.log
  semgrep:
    runs-on: ubuntu-latest
    name: Check
    steps:
      - uses: actions/checkout@v2.4.0
      - name: Semgrep
        id: semgrep
        uses: returntocorp/semgrep-action@v1
        with:
          config: p/r2c
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}