Add GitHub Actions Workflows

descoped · Sep 30, 2024 · 4f13e11 · 4f13e11
1 parent 04e8b1a
commit 4f13e11
Show file tree

Hide file tree

Showing 14 changed files with 405 additions and 47 deletions.
diff --git a/.github/renovate.json b/.github/renovate.json
@@ -0,0 +1,64 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:base",
+    ":dependencyDashboard",
+    "github>whitesource/merge-confidence:beta"
+  ],
+  "packageRules": [
+    {
+      "matchManagers": [
+        "maven"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "pin",
+        "digest"
+      ],
+      "automerge": true
+    },
+    {
+      "matchDepTypes": [
+        "devDependencies"
+      ],
+      "automerge": true
+    },
+    {
+      "excludePackageNames": [
+        "javax.xml.bind:jaxb-api"
+      ],
+      "exclude": true
+    },
+    {
+      "excludePackageNames": [
+        "com.sun.xml.bind:jaxb-core",
+        "com.sun.xml.bind:jaxb-impl"
+      ],
+      "exclude": true
+    },
+    {
+      "matchSourceUrlPrefixes": [
+        "https://github.com/junit-team/junit5"
+      ],
+      "groupName": "junit5 monorepo",
+      "automerge": true
+    }
+  ],
+  "vulnerabilityAlerts": {
+    "labels": [
+      "security"
+    ],
+    "automerge": true
+  },
+  "lockFileMaintenance": {
+    "enabled": true,
+    "automerge": true
+  },
+  "rangeStrategy": "auto",
+  "dependencyDashboard": true,
+  "github-actions": {
+    "enabled": true,
+    "automerge": true
+  }
+}
diff --git a/.github/settings.xml b/.github/settings.xml
@@ -0,0 +1,12 @@
+<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
+
+    <servers>
+        <server>
+            <id>ossrh</id>
+            <username>${env.MAVEN_USERNAME}</username>
+            <password>${env.MAVEN_PASSWORD}</password>
+        </server>
+    </servers>
+
+</settings>
diff --git a/.github/workflows/build-and-release-snapshot.yml b/.github/workflows/build-and-release-snapshot.yml
@@ -0,0 +1,64 @@
+name: Build and Publish Snapshot
+
+on:
+  push:
+    branches:
+      - master
+    tags-ignore:
+      - '**'
+    paths-ignore:
+      - '**.md'
+
+env:
+  MAVEN_OPTS: ${{ vars.MAVEN_OPTS }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 11
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+          cache: maven
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+
+      #      - name: Cache Maven packages
+      #        uses: actions/cache@v3
+      #        with:
+      #          path: ~/.m2
+      #          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+      #          restore-keys: ${{ runner.os }}-m2
+
+      - name: Prepare Maven settings.xml
+        run: |
+          cat "${{ github.workspace }}/.github/settings.xml" > ~/.m2/settings.xml         
+
+      - name: Build with Maven
+        run: mvn --batch-mode --update-snapshots package
+
+      - name: Publish Snapshot to OSS SonaType
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USER }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+        run: |
+          mvn --batch-mode --no-transfer-progress deploy \
+            -DskipTests \
+            -P oss-sonatype
+
+      - name: Notify on success
+        if: success()
+        run: |
+          echo "Snapshot has been successfully deployed to OSS SonaType."
+
+      - name: Notify on failure
+        if: failure()
+        run: |
+          echo "Snapshot deployment failed. Please check the logs for more information."
diff --git a/.github/workflows/build-and-verify-pr.yml b/.github/workflows/build-and-verify-pr.yml
@@ -0,0 +1,36 @@
+name: Verify PRs
+
+on:
+  pull_request:
+    branches:
+      - master
+    tags-ignore:
+      - '**'
+    paths-ignore:
+      - '**.md'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 11
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+          cache: maven
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+
+      - name: Prepare Maven settings.xml
+        run: |
+          cat "${{ github.workspace }}/.github/settings.xml" > ~/.m2/settings.xml
+
+      - name: Build with Maven
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USER }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+        run: |
+          mvn --batch-mode --update-snapshots verify
diff --git a/.github/workflows/coverage-and-sonar-analysis.yml b/.github/workflows/coverage-and-sonar-analysis.yml
@@ -0,0 +1,44 @@
+name: Coverage and Sonar Analysis
+
+on:
+  push:
+    branches:
+      - master
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+    paths-ignore:
+      - '**.md'
+
+jobs:
+  sonarcloud:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+
+      - name: Build, Test, and Analyze
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
+        run: |
+          mvn --batch-mode --no-transfer-progress clean verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar \
+            -P coverage,sonar \
+            -Dsonar.projectKey=descoped_rawdata-client-provider-postgres \
+            -Dsonar.organization=descoped \
+            -Dsonar.host.url=https://sonarcloud.io \
+            -Dsonar.coverage.jacoco.xmlReportPaths=target/site/jacoco/jacoco.xml
diff --git a/README.md b/README.md
@@ -1,5 +1,11 @@
 # rawdata-client-provider-postgres
 
+![Build Status](https://img.shields.io/github/actions/workflow/status/descoped/rawdata-client-provider-postgres/coverage-and-sonar-analysis.yml)
+![Latest Tag](https://img.shields.io/github/v/tag/descoped/rawdata-client-provider-postgres)
+![Renovate](https://img.shields.io/badge/renovate-enabled-brightgreen.svg)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=descoped_rawdata-client-provider-postgres&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=descoped_rawdata-client-provider-postgres) [![Coverage](https://sonarcloud.io/api/project_badges/measure?project=descoped_rawdata-client-provider-postgres&metric=coverage)](https://sonarcloud.io/summary/new_code?id=descoped_rawdata-client-provider-postgres)
+[![Snyk Security Score](https://snyk.io/test/github/descoped/rawdata-client-provider-postgres/badge.svg)](https://snyk.io/test/github/descoped/rawdata-client-provider-postgres)
+
 ## Start and initialize database
 
 ```