spring-boot-tutorials/.github/workflows/gradle-build.yml at master · rashidi/spring-boot-tutorials · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
name: Gradle Build

on:
  push:
    branches: [ "master" ]
    paths:
      - 'gradle/wrapper/**'
      - '**/*.gradle.kts'
      - '**/*.java'
      - '**/gradle-build.yml'
      - 'gradle.properties'
  pull_request:
    branches: [ "master" ]
    types: [opened, synchronize, reopened]
    paths:
      - 'gradle/wrapper/**'
      - '**/*.gradle.kts'
      - '**/*.java'
      - '**/gradle-build.yml'
      - 'gradle.properties'

permissions:
  contents: write
  pull-requests: write

jobs:
  check-changes:
    name: Check for file changes
    runs-on: ubuntu-latest
    outputs:
      build-changes: ${{ steps.filter.outputs.build }}
      gradle-root-changes: ${{ steps.filter.output.gradle-root }}
      source-changes: ${{ steps.filter.outputs.java }}
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - uses: dorny/paths-filter@v4
        id: filter
        with:
          filters: |
            build:
              - 'gradle/wrapper/**'
              - '**/*.gradle.kts'
              - '**/gradle-build.yml'
              - 'gradle.properties'
            gradle-root:
              - 'build.gradle.kts'
            java:
              - '**/*.java'

  gradle-build:
    name: Build project with Gradle
    needs: check-changes
    if: ${{ needs.check-changes.outputs.build-changes == 'true'  || needs.check-changes.outputs.source-changes == 'true' }}
    runs-on: ubuntu-latest
    outputs:
      build-artifacts: ${{ steps.upload-build-artifacts.outputs.artifact-id }}
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          java-version: '25'
          distribution: 'temurin'
      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v6
        with:
          add-job-summary-as-pr-comment: on-failure
          build-scan-publish: true
          build-scan-terms-of-use-url: "https://gradle.com/terms-of-service"
          build-scan-terms-of-use-agree: "yes"
          cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
      - name: Run CI build
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew check --configuration-cache --parallel
      - name: Upload build artifacts
        uses: actions/upload-artifact@v7
        id: upload-build-artifacts
        with:
          name: build-artifacts
          path: '**/build/'

  dependecy-submission:
    name: Dependency Submission
    needs: check-changes
    runs-on: ubuntu-latest
    if: ${{ needs.check-changes.outputs.build-changes == 'true' }}
    steps:
      - name: Checkout sources
        uses: actions/checkout@v6
      - name: Setup Java
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 25
      - name: Generate and submit dependency graph
        uses: gradle/actions/dependency-submission@v6
        with:
          build-scan-publish: true
          build-scan-terms-of-use-url: "https://gradle.com/terms-of-service"
          build-scan-terms-of-use-agree: "yes"

  code-quality:
    name: Code Quality with Sonar
    needs: [gradle-build, check-changes]
    if: ${{ needs.check-changes.outputs.source-changes == 'true' || needs.check-changes.outputs.gradle-root-changes == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          java-version: '25'
          distribution: 'temurin'
      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v6
        with:
          add-job-summary-as-pr-comment: on-failure
          build-scan-publish: true
          build-scan-terms-of-use-url: "https://gradle.com/terms-of-service"
          build-scan-terms-of-use-agree: "yes"
      - name: Download build artifacts
        uses: actions/download-artifact@v8
        with:
          artifact-ids: ${{ needs.gradle-build.outputs.build-artifacts }}
      - name: Publish Sonar report
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        run: ./gradlew sonar