11# CI with maven build and scan
22#
3- # version 1.0.1
3+ # version 1.1.0
44#
55# see : https://universe.fugerit.org/src/docs/conventions/workflows/build_maven_package.html
66
2525 name : Build
2626 runs-on : ubuntu-latest
2727 steps :
28- - uses : actions/checkout@main
28+ - uses : fugerit-org/psychic- actions/maven-build-scan@stable
2929 with :
30- # Shallow clones should be disabled for a better relevancy of analysis
31- fetch-depth : 0
32- - name : Set up JDK 17
33- uses : actions/setup-java@main
34- with :
35- java-version : ' 17'
36- distribution : ' corretto'
37- cache : ' maven'
38- - name : Cache Maven packages
39- uses : actions/cache@main
40- with :
41- path : ~/.m2
42- key : ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
43- restore-keys : ${{ runner.os }}-m2
44- - name : Cache SonarCloud packages
45- uses : actions/cache@main
46- with :
47- path : ~/.sonar/cache
48- key : ${{ runner.os }}-sonar
49- restore-keys : ${{ runner.os }}-sonar
50- - uses : actions/setup-node@main
51- with :
52- node-version : 20
53- - name : Maven version
54- run : mvn -v
55- env :
56- # Needed to get some information about the pull request, if any
57- GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
58- # SonarCloud access token should be generated from https://sonarcloud.io/account/security/
59- SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
60- - name : Build and analyze
61- run : mvn -B clean install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage,full,metadata,sonarfugerit,buildreact -Dsonar.projectKey=fugerit-org_${{github.event.repository.name}}
62- env :
63- # Needed to get some information about the pull request, if any
64- GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
65- # SonarCloud access token should be generated from https://sonarcloud.io/account/security/
66- SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
67-
68- # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
69- - name : Update dependency graph
70- # if DISABLE_MAVEN_DEPENDENCY_SUBMISSION is set to true, skip this step
71- if : ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION != 'true' }}
72- uses : advanced-security/maven-dependency-submission-action@main
30+ github-token : ${{ secrets.GITHUB_TOKEN }}
31+ sonar-token : ${{ secrets.SONAR_TOKEN }}
32+ disable-maven-dependency-submission : ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION }}
0 commit comments