Skip to content

Commit 341ef81

Browse files
tomasz-tylenda-sonarsourcetomasz-tylenda-sonarsource
committed
comment
1 parent d09dded commit 341ef81

File tree

1 file changed

+115
-115
lines changed

1 file changed

+115
-115
lines changed

‎.github/workflows/build.yml‎

Lines changed: 115 additions & 115 deletions
Original file line numberDiff line numberDiff line change
@@ -15,123 +15,123 @@ concurrency:
1515
cancel-in-progress: true
1616

1717
jobs:
18-
build:
19-
runs-on: github-ubuntu-latest-m # Public repo uses custom GitHub-hosted runner
20-
name: Build
21-
permissions:
22-
id-token: write # Required for Vault OIDC authentication
23-
contents: write # Required for repository access and tagging
24-
outputs:
25-
build-number: ${{ steps.build-maven.outputs.BUILD_NUMBER }}
26-
deployed: ${{ steps.build-maven.outputs.deployed }}
27-
steps:
28-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
29-
- uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
30-
with:
31-
version: 2025.7.12
32-
- uses: SonarSource/ci-github-actions/build-maven@v1
33-
id: build-maven
34-
with:
35-
deploy-pull-request: true
36-
# Override artifactory roles for public repo using private access
37-
artifactory-reader-role: private-reader
38-
artifactory-deployer-role: qa-deployer
39-
maven-args: >
40-
-Dmaven.test.skip=true
41-
-Dsonar.skip=true
42-
-pl !java-checks-test-sources/default,!java-checks-test-sources/aws,!java-checks-test-sources/spring-web-4.0
18+
# build:
19+
# runs-on: github-ubuntu-latest-m # Public repo uses custom GitHub-hosted runner
20+
# name: Build
21+
# permissions:
22+
# id-token: write # Required for Vault OIDC authentication
23+
# contents: write # Required for repository access and tagging
24+
# outputs:
25+
# build-number: ${{ steps.build-maven.outputs.BUILD_NUMBER }}
26+
# deployed: ${{ steps.build-maven.outputs.deployed }}
27+
# steps:
28+
# - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
29+
# - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
30+
# with:
31+
# version: 2025.7.12
32+
# - uses: SonarSource/ci-github-actions/build-maven@v1
33+
# id: build-maven
34+
# with:
35+
# deploy-pull-request: true
36+
# # Override artifactory roles for public repo using private access
37+
# artifactory-reader-role: private-reader
38+
# artifactory-deployer-role: qa-deployer
39+
# maven-args: >
40+
# -Dmaven.test.skip=true
41+
# -Dsonar.skip=true
42+
# -pl !java-checks-test-sources/default,!java-checks-test-sources/aws,!java-checks-test-sources/spring-web-4.0
4343

44-
ruling-qa:
45-
strategy:
46-
fail-fast: false
47-
matrix:
48-
runner:
49-
- github-ubuntu-latest-m
50-
- github-windows-latest-m
51-
profile:
52-
- without-sonarqube-project
53-
- only-sonarqube-project
54-
name: Ruling QA
55-
needs:
56-
- build
57-
if: ${{ needs.build.outputs.deployed }}
58-
runs-on: ${{ matrix.runner }}
59-
permissions:
60-
id-token: write
61-
contents: write
62-
env:
63-
BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
64-
steps:
65-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
66-
with:
67-
submodules: recursive
68-
- uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
69-
with:
70-
version: 2025.7.12
71-
- name: Select Java 17
72-
run: mise use java@17
73-
- name: Configure Maven
74-
uses: SonarSource/ci-github-actions/config-maven@v1
75-
with:
76-
artifactory-reader-role: private-reader
77-
- name: Getting Vault Secrets
78-
id: secrets
79-
uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
80-
with:
81-
secrets: |
82-
development/github/token/licenses-ro token | GITHUB_TOKEN;
83-
- name: Run ruling tests
84-
shell: bash # Set explicitly so Bash is used on Windows runners too.
85-
env:
86-
MAVEN_OPTS: "-Xmx3g"
87-
GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
88-
run: |
89-
cd its/ruling
90-
mvn package --batch-mode "-Pit-ruling,${{ matrix.profile }}" -Dsonar.runtimeVersion=LATEST_RELEASE -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=methods -DuseUnlimitedThreads=true
44+
# ruling-qa:
45+
# strategy:
46+
# fail-fast: false
47+
# matrix:
48+
# runner:
49+
# - github-ubuntu-latest-m
50+
# - github-windows-latest-m
51+
# profile:
52+
# - without-sonarqube-project
53+
# - only-sonarqube-project
54+
# name: Ruling QA
55+
# needs:
56+
# - build
57+
# if: ${{ needs.build.outputs.deployed }}
58+
# runs-on: ${{ matrix.runner }}
59+
# permissions:
60+
# id-token: write
61+
# contents: write
62+
# env:
63+
# BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
64+
# steps:
65+
# - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
66+
# with:
67+
# submodules: recursive
68+
# - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
69+
# with:
70+
# version: 2025.7.12
71+
# - name: Select Java 17
72+
# run: mise use java@17
73+
# - name: Configure Maven
74+
# uses: SonarSource/ci-github-actions/config-maven@v1
75+
# with:
76+
# artifactory-reader-role: private-reader
77+
# - name: Getting Vault Secrets
78+
# id: secrets
79+
# uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
80+
# with:
81+
# secrets: |
82+
# development/github/token/licenses-ro token | GITHUB_TOKEN;
83+
# - name: Run ruling tests
84+
# shell: bash # Set explicitly so Bash is used on Windows runners too.
85+
# env:
86+
# MAVEN_OPTS: "-Xmx3g"
87+
# GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
88+
# run: |
89+
# cd its/ruling
90+
# mvn package --batch-mode "-Pit-ruling,${{ matrix.profile }}" -Dsonar.runtimeVersion=LATEST_RELEASE -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=methods -DuseUnlimitedThreads=true
91+
92+
# plugin-qa:
93+
# strategy:
94+
# fail-fast: false
95+
# matrix:
96+
# sq_version:
97+
# - LATEST_RELEASE
98+
# - DEV
99+
# name: Plugin QA
100+
# needs:
101+
# - build
102+
# if: ${{ needs.build.outputs.deployed }}
103+
# runs-on: github-ubuntu-latest-m
104+
# permissions:
105+
# id-token: write
106+
# contents: write
107+
# env:
108+
# BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
109+
# steps:
110+
# - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
111+
# with:
112+
# submodules: recursive
113+
# - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
114+
# with:
115+
# version: 2025.7.12
116+
# - name: Select Java 17
117+
# run: mise use java@17
118+
# - name: Configure Maven
119+
# uses: SonarSource/ci-github-actions/config-maven@v1
120+
# with:
121+
# artifactory-reader-role: private-reader
122+
# - name: Getting Vault Secrets
123+
# id: secrets
124+
# uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
125+
# with:
126+
# secrets: |
127+
# development/github/token/licenses-ro token | GITHUB_TOKEN;
128+
# - name: Plugin QA
129+
# env:
130+
# GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
131+
# run: |
132+
# cd its/plugin
133+
# mvn package --batch-mode -Pit-plugin -Dsonar.runtimeVersion=${{ matrix.sq_version }} -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=classes -DuseUnlimitedThreads=true
91134

92-
plugin-qa:
93-
strategy:
94-
fail-fast: false
95-
matrix:
96-
sq_version:
97-
- LATEST_RELEASE
98-
- DEV
99-
name: Plugin QA
100-
needs:
101-
- build
102-
if: ${{ needs.build.outputs.deployed }}
103-
runs-on: github-ubuntu-latest-m
104-
permissions:
105-
id-token: write
106-
contents: write
107-
env:
108-
BUILD_NUMBER: ${{ needs.build.outputs.build-number }}
109-
steps:
110-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
111-
with:
112-
submodules: recursive
113-
- uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
114-
with:
115-
version: 2025.7.12
116-
- name: Select Java 17
117-
run: mise use java@17
118-
- name: Configure Maven
119-
uses: SonarSource/ci-github-actions/config-maven@v1
120-
with:
121-
artifactory-reader-role: private-reader
122-
- name: Getting Vault Secrets
123-
id: secrets
124-
uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1.0
125-
with:
126-
secrets: |
127-
development/github/token/licenses-ro token | GITHUB_TOKEN;
128-
- name: Plugin QA
129-
env:
130-
GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
131-
run: |
132-
cd its/plugin
133-
mvn package --batch-mode -Pit-plugin -Dsonar.runtimeVersion=${{ matrix.sq_version }} -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=classes -DuseUnlimitedThreads=true
134-
135135
qa-os-win:
136136
runs-on: github-windows-latest-m
137137
name: Windows Build

0 commit comments

Comments
 (0)