bom-submodules.yml

name: BOM Builder
on:
  workflow_call:
    inputs:
      baseDir:
        description: 'Base Directory with suffix /'
        required: true
        type: string
        default: ''
      name:
        description: 'BOM Name'
        required: true
        type: string
        default: ''
      publishToCentral:
        description: 'Whether or not to publish to the central repository'
        required: false
        type: string
        default: 'false'
    secrets:
      USERNAME:
        required: true
        description: 'Username for Github'
      USER_TOKEN:
        required: true
        description: 'The supplied token for Github'
      SONA_USERNAME:
        required: true
        description: 'Username for Maven Central'
      SONA_PASSWORD:
        required: true
        description: 'Passphrase for Maven Central'
      GPG_PASSPHRASE:
        required: false
        description: 'Passphrase for GPG'
      GPG_PRIVATE_KEY:
        required: false
        description: 'A GPG private key '
permissions:
  contents: read
  packages: write
env:
  GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
  GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        java-version: [ 21 ]
    name: ${{ inputs.name }} Builder
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: 'recursive'
          show-progress: 'true'
          fetch-depth: 0
      - name: Set up Java
        uses: actions/setup-java@v4.2.1
        with:
          java-version: ${{ matrix.java-version }}
          distribution: 'oracle'
          #server-id: github_token
          #settings-path: ${{ github.workspace }}
          #cache: 'maven'
          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
          gpg-passphrase: GPG_PASSPHRASE
      - name: Update Settings.xml
        uses: whelk-io/maven-settings-xml-action@v22
        with:
          servers: >
            [
              {
                "id": "github",
                "username": "${{secrets.USERNAME}}",
                "password": "${{secrets.USER_TOKEN}}"
              },
              {
                "id": "packages",
                "username": "${{secrets.USERNAME}}",
                "password": "${{secrets.USER_TOKEN}}"
              },
              {
                "id": "packages_jwebmp",
                "username": "${{secrets.USERNAME}}",
                "password": "${{secrets.USER_TOKEN}}"
              },
              {
                "id": "sona-snapshot",
                "username": "${{secrets.SONA_USERNAME}}",
                "password": "${{secrets.SONA_PASSWORD}}"
              },
              {
                "id": "sona-release",
                "username": "${{secrets.SONA_USERNAME}}",
                "password": "${{secrets.SONA_PASSWORD}}"
              }
            ]
          repositories: >
            [
              {
                "id": "packages",
                "name": "packages",
                "url": "https://maven.pkg.github.com/GuicedEE/Packages",
                "releases": {
                  "enabled": "true"
                },
                "snapshots": {
                  "enabled": "true"
                }
              },
            {
              "id": "packages_jwebmp",
              "name": "packages_jwebmp",
              "url": "https://maven.pkg.github.com/JWebMP/Packages",
              "releases": {
                "enabled": "true"
              },
              "snapshots": {
                "enabled": "true"
              }
            },
              {
                "id": "shibboleth",
                "name": "shibboleth",
                "url": "https://build.shibboleth.net/nexus/content/repositories/releases",
                "releases": {
                  "enabled": "true"
                },
                "snapshots": {
                  "enabled": "true"
                }
              }
            ]
      - name: Cache Maven dependencies
        uses: actions/cache@v4
        with:
          path: ~/.m2/repository
          key: maven-cache-${{inputs.name}}
          restore-keys: |
            maven-cache-${{inputs.name}}

      - name: Build
        run:
          mvn -B deploy --file ${{inputs.baseDir}}pom.xml -U ${{inputs.publishToCentral == 'true' && '-Psonatype-distribution,release -Dgpg.passphrase=' || ' '}}${{inputs.publishToCentral == 'true' && secrets.GPG_PASSPHRASE || ' '}} -Dmaven.test.failure.ignore=true