Skip to content

Commit 230d893

Browse files
committed
Link fugerit-org/psychic-actions/maven-build-scan stable
1 parent e491b39 commit 230d893

File tree

1 file changed

+5
-45
lines changed

1 file changed

+5
-45
lines changed
Lines changed: 5 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# CI with maven build and scan
22
#
3-
# version 1.0.1
3+
# version 1.1.0
44
#
55
# see : https://universe.fugerit.org/src/docs/conventions/workflows/build_maven_package.html
66

@@ -25,48 +25,8 @@ jobs:
2525
name: Build
2626
runs-on: ubuntu-latest
2727
steps:
28-
- uses: actions/checkout@main
28+
- uses: fugerit-org/psychic-actions/maven-build-scan@stable
2929
with:
30-
# Shallow clones should be disabled for a better relevancy of analysis
31-
fetch-depth: 0
32-
- name: Set up JDK 17
33-
uses: actions/setup-java@main
34-
with:
35-
java-version: '17'
36-
distribution: 'corretto'
37-
cache: 'maven'
38-
- name: Cache Maven packages
39-
uses: actions/cache@main
40-
with:
41-
path: ~/.m2
42-
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
43-
restore-keys: ${{ runner.os }}-m2
44-
- name: Cache SonarCloud packages
45-
uses: actions/cache@main
46-
with:
47-
path: ~/.sonar/cache
48-
key: ${{ runner.os }}-sonar
49-
restore-keys: ${{ runner.os }}-sonar
50-
- uses: actions/setup-node@main
51-
with:
52-
node-version: 20
53-
- name: Maven version
54-
run: mvn -v
55-
env:
56-
# Needed to get some information about the pull request, if any
57-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
58-
# SonarCloud access token should be generated from https://sonarcloud.io/account/security/
59-
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
60-
- name: Build and analyze
61-
run: mvn -B clean install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage,full,metadata,sonarfugerit,buildreact -Dsonar.projectKey=fugerit-org_${{github.event.repository.name}}
62-
env:
63-
# Needed to get some information about the pull request, if any
64-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
65-
# SonarCloud access token should be generated from https://sonarcloud.io/account/security/
66-
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
67-
68-
# Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
69-
- name: Update dependency graph
70-
# if DISABLE_MAVEN_DEPENDENCY_SUBMISSION is set to true, skip this step
71-
if: ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION != 'true' }}
72-
uses: advanced-security/maven-dependency-submission-action@main
30+
github-token: ${{ secrets.GITHUB_TOKEN }}
31+
sonar-token: ${{ secrets.SONAR_TOKEN }}
32+
disable-maven-dependency-submission: ${{ vars.DISABLE_MAVEN_DEPENDENCY_SUBMISSION }}

0 commit comments

Comments
 (0)