build.yaml

name: 'Build Kotlin AWS CDK DSL'
on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "*" ]
env:
  GRADLE_BUILD_ACTION_CACHE_DEBUG_ENABLED: 'false'
  ORG_GRADLE_PROJECT_signingKey: '${{ secrets.SIGNING_KEY }}'
  ORG_GRADLE_PROJECT_signingPassword: '${{ secrets.SIGNING_PASSWORD }}'
  ORG_GRADLE_PROJECT_sonatypeUsername: '${{ secrets.SONATYPEUSERNAME }}'
  ORG_GRADLE_PROJECT_sonatypePassword: '${{ secrets.SONATYPEPASSWORD }}'
jobs:
  build:
    runs-on:
    - 'xlarge_runner'
    permissions:
      id-token: write
      contents: write
      checks: write
      statuses: write
    steps:
    # https://github.com/hmarr/debug-action
    - uses: 'hmarr/debug-action@cd1afbd7852b7ad7b1b7a9a1b03efebd3b0a1820' # v3.0.0

    # https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions
    - uses: 'zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45' # v3.0.4

    # https://github.com/actions/checkout
    - name: 'checkout'
      uses: 'actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f' # v4.1.3

    # https://github.com/actions/setup-java
    - name: 'Set up JDK'
      uses: 'actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9' # v4.2.1
      with:
        java-version: '17'
        distribution: 'temurin'
        check-latest: 'true'

    # https://github.com/gradle/wrapper-validation-action
    - name: 'Validate Gradle Wrapper'
      uses: 'gradle/wrapper-validation-action@5188e9b5527a0a094cee21e2fe9a8ca44b4629af' # v3.3.1

    # https://github.com/gradle/actions/tree/main/setup-gradle
    - name: 'Set up Gradle'
      uses: 'gradle/actions/setup-gradle@750cdda3edd6d51b7fdfc069d2e2818cf3c44f4c' # v3.3.1
      with:
        gradle-version: 'wrapper'
        gradle-home-cache-includes: |-
          jdks
          caches
          notifications
        gradle-home-cache-cleanup: 'true'
        dependency-graph: 'generate-and-submit'

    - name: 'build'
      run: './gradlew build --info --scan --stacktrace'

    - name: 'publish'
      run: './gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository --info --no-configuration-cache --stacktrace'