Skip to content

Commit

Permalink
Link fugerit-org/psychic-actions/maven-build-scan stable
Browse files Browse the repository at this point in the history
  • Loading branch information
fugerit79 committed Feb 23, 2024
1 parent 958799c commit ae8b91e
Showing 1 changed file with 5 additions and 42 deletions.
47 changes: 5 additions & 42 deletions .github/workflows/build_maven_package.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# CI with maven build and scan
#
# version 1.0.0
# version 1.1.0
#
# see : https://universe.fugerit.org/src/docs/conventions/workflows/build_maven_package.html

Expand All @@ -25,45 +25,8 @@ jobs:
name: Build
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@main
- uses: fugerit-org/psychic-actions/maven-build-scan@stable
with:
# Shallow clones should be disabled for a better relevancy of analysis
fetch-depth: 0
- name: Set up JDK 17
uses: actions/setup-java@main
with:
java-version: '17'
distribution: 'corretto'
cache: 'maven'
- name: Cache Maven packages
uses: actions/cache@main
with:
path: ~/.m2
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-m2
- name: Cache SonarCloud packages
uses: actions/cache@main
with:
path: ~/.sonar/cache
key: ${{ runner.os }}-sonar
restore-keys: ${{ runner.os }}-sonar
- name: Maven version
run: mvn -v
env:
# Needed to get some information about the pull request, if any
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# SonarCloud access token should be generated from https://sonarcloud.io/account/security/
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
- name: Build and analyze
run: mvn -B clean install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage,full,metadata,sonarfugerit,buildreact -Dsonar.projectKey=fugerit-org_${{github.event.repository.name}}
env:
# Needed to get some information about the pull request, if any
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# SonarCloud access token should be generated from https://sonarcloud.io/account/security/
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

# Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
- name: Update dependency graph
# if DISABLE_MAVEN_DEPENDENCY_SUBMISSION is set to true, skip this step
if: ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION != 'true' }}
uses: advanced-security/maven-dependency-submission-action@main
github-token: ${{ secrets.GITHUB_TOKEN }}
sonar-token: ${{ secrets.SONAR_TOKEN }}
disable-maven-dependency-submission: ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION }}

0 comments on commit ae8b91e

Please sign in to comment.