Fix/sec workflow additions #34
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| pull_request: | |
| types: [ opened, reopened, synchronize ] | |
| push: | |
| jobs: | |
| build-gradle: | |
| name: Build | |
| # Run on external PRs, but not on internal PRs since those will be run by push to branch | |
| runs-on: ubuntu-latest | |
| outputs: | |
| code-version: ${{ steps.extract.outputs.CODE_VERSION }} | |
| steps: | |
| - name: Checkout project sources | |
| uses: actions/checkout@v4 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| - name: Validate Gradle Wrapper | |
| uses: gradle/wrapper-validation-action@v1 | |
| - name: Build with Gradle Wrapper | |
| uses: gradle/[email protected] | |
| with: | |
| gradle-version: wrapper | |
| arguments: build | |
| - id: extract | |
| name: Extract code version from gradle.properties | |
| run: echo "CODE_VERSION=$(awk -F= '$1~/VERSION_NAME/{print $2}' gradle.properties)" >> $GITHUB_OUTPUT | |
| unit-tests: | |
| runs-on: ubuntu-latest | |
| needs: [ build-gradle ] | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout project source code | |
| uses: actions/checkout@v4 | |
| - name: set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: 17 | |
| distribution: "temurin" | |
| - name: Validate Gradle Wrapper | |
| uses: gradle/wrapper-validation-action@v1 | |
| - name: Build with Gradle Wrapper | |
| uses: gradle/[email protected] | |
| with: | |
| arguments: test --full-stacktrace | |
| android-tests: | |
| runs-on: macos-latest | |
| timeout-minutes: 35 | |
| needs: [ build-gradle, unit-tests ] | |
| strategy: | |
| matrix: | |
| include: | |
| - api-level: 28 | |
| target: default | |
| arch: x86 | |
| - api-level: 33 | |
| target: google_apis # emulator API 33 only exists with Google APIs | |
| arch: x86_64 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout the code | |
| uses: actions/checkout@v4 | |
| - name: set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: 17 | |
| distribution: "temurin" | |
| - name: Validate Gradle Wrapper | |
| uses: gradle/wrapper-validation-action@v1 | |
| - name: Run android tests | |
| uses: reactivecircus/android-emulator-runner@v2 | |
| with: | |
| api-level: ${{ matrix.api-level }} | |
| target: ${{ matrix.target }} | |
| arch: ${{ matrix.arch }} | |
| script: ./gradlew $GRADLE_OPTS connectedCheck --stacktrace | |
| publish-to-snapshot: | |
| name: Publish SNAPSHOT to sonatype.org | |
| needs: [ android-tests ] | |
| # Runs only in main | |
| if: github.event_name != 'pull_request' && endsWith(needs.build-gradle.outputs.code-version, '-SNAPSHOT') && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release')) && github.repository_owner == 'eu-digital-identity-wallet' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Checkout project sources | |
| uses: actions/checkout@v3 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| - name: Validate Gradle Wrapper | |
| uses: gradle/wrapper-validation-action@v1 | |
| - name: Publish with Gradle Wrapper | |
| uses: gradle/[email protected] | |
| with: | |
| arguments: publishAllPublicationsToMavenCentral --full-stacktrace | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GIT_REF_NAME: ${{ github.ref_name }} | |
| ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.OSSRH_GPG_KEY_ID }} | |
| ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.OSSRH_GPG_SECRET_KEY }} | |
| ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.OSSRH_GPG_PASSPHRASE }} | |
| ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.OSSRH_USERNAME }} | |
| ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.OSSRH_PASSWORD }} |