TestCheater/.github/workflows/github-actions-java8.yml at main · kolod/TestCheater · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
name: Java CI

# Controls when the workflow will run
on:
  # Triggers the workflow on push or pull request events but only for the main branch
  push:
    branches: [main]
    paths:
      - 'src/**'
      - 'build.gradle.kts'
      - 'gradle.properties'
      - 'settings.gradle'
      - 'gradle/**'
      - 'gradlew'
      - 'gradlew.bat'
      - '.github/workflows/**'
  pull_request:
    branches: [main]
    paths:
      - 'src/**'
      - 'build.gradle.kts'
      - 'gradle.properties'
      - 'settings.gradle'
      - 'gradle/**'
      - 'gradlew'
      - 'gradlew.bat'
      - '.github/workflows/**'

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# Cancel in-progress workflows when a new commit is pushed
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # Build and test on multiple platforms
  build:
    strategy:
      matrix:
        os: [windows-latest, ubuntu-latest, macos-latest]

    # The type of runner that the job will run on
    runs-on: ${{ matrix.os }}

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - name: Checkout repository code
        uses: actions/checkout@v6

      - name: Set up JDK 17
        uses: actions/setup-java@v5
        with:
          java-version: "17"
          distribution: "zulu"
          check-latest: true

      - name: Validate Gradle wrapper
        uses: gradle/actions/wrapper-validation@v4

      - name: Make Gradle wrapper executable
        if: runner.os != 'Windows'
        run: chmod +x ./gradlew

      - name: Run OWASP dependency check
        if: matrix.os == 'windows-latest'  # Only run on one platform
        run: ./gradlew dependencyCheckAnalyze --no-daemon --stacktrace
        continue-on-error: true  # Don't fail the build if dependency check has issues
        env:
          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}

      - name: Upload dependency check report
        uses: actions/upload-artifact@v7
        if: matrix.os == 'windows-latest'  # Only upload from one platform
        with:
          name: dependency-check-report
          path: build/reports/dependency-check-report.html
          retention-days: 30

      - name: Build with Gradle
        run: ./gradlew buildShadow --no-daemon --stacktrace

      - uses: actions/upload-artifact@v7
        if: matrix.os == 'windows-latest'  # Only upload from one platform
        with:
          name: TestCheater-${{ github.sha }}
          path: build/libs/*.jar
          retention-days: 30

      - name: Upload build reports
        uses: actions/upload-artifact@v7
        if: failure()
        with:
          name: build-reports-${{ matrix.os }}
          path: build/reports/
          retention-days: 7