-
Notifications
You must be signed in to change notification settings - Fork 0
108 lines (106 loc) · 3.56 KB
/
ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
name: CI
on:
push:
branches: [ main ]
pull_request: ~
workflow_dispatch: ~
jobs:
build:
runs-on: ubuntu-latest
strategy:
matrix:
java_version: [ "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23" ]
steps:
- uses: actions/checkout@v4
- name: Set up JDK for compilation
uses: actions/setup-java@v4
with:
distribution: "zulu"
java-version: "23" # Always use the latest JDK for building
- name: Load Maven dependencies cache
uses: actions/cache@v3
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-build${{ matrix.javaversion }}-${{ hashFiles('**/pom.xml') }}
restore-keys: |
${{ runner.os }}-maven-
- name: Install dependencies
run: make install
- name: Compile
run: make build
- name: Set up Java ${{ matrix.java_version }}
uses: actions/setup-java@v3
with:
distribution: "zulu"
java-version: ${{ matrix.java_version }}
- name: Run test with Java ${{ matrix.java_version }}
run: make test
coverage:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up JDK for compilation
uses: actions/setup-java@v4
with:
distribution: "zulu"
java-version: "23" # Always use the latest JDK for building
- name: Install dependencies
run: make install
- name: Test coverage
run: make coverage
- name: Load Rust cache
if: github.ref == 'refs/heads/main'
uses: Swatinem/rust-cache@v2
- name: Install grcov
if: github.ref == 'refs/heads/main'
run: cargo install grcov
- name: Convert coverage report
if: github.ref == 'refs/heads/main'
run: grcov target/site/jacoco/jacoco.xml --source-dir ./ --ignore "target/*" > coverage.lcov
- name: Coveralls
if: github.ref == 'refs/heads/main'
uses: coverallsapp/github-action@master
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
path-to-lcov: "./coverage.lcov"
lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up JDK for compilation
uses: actions/setup-java@v4
with:
distribution: "zulu"
java-version: "23" # Always use the latest JDK for building
- name: Install dependencies
run: make install
- name: Run CheckStyle checks
uses: nikitasavinov/[email protected]
with:
level: error
fail_on_error: true
checkstyle_config: easypost_java_style.xml
tool_name: "style_enforcer"
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up JDK for compilation
uses: actions/setup-java@v4
with:
distribution: "zulu"
java-version: "23" # Always use the latest JDK for building
- name: Load Maven dependencies and CVE database cache
uses: actions/cache@v3
with:
path: ~/.m2/repository # The CVE database is included in the Maven repository folder
key: ${{ runner.os }}-maven-security-${{ hashFiles('**/pom.xml') }}
restore-keys: |
${{ runner.os }}-maven-
- name: Run security analysis
run: make scan
- name: Upload Test results
uses: actions/upload-artifact@master
with:
name: DependencyCheck report
path: ${{github.workspace}}/target/dependency-check-report.html