Skip to content

Commit cf70a31

Browse files
sgammonsgammon
committed
fixup! temporary github actions jobs
Signed-off-by: Sam Gammon <[email protected]>
1 parent a4f6cb6 commit cf70a31

13 files changed

+1188
-0
lines changed

‎.github/workflows/checks.apicheck.yml

Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
name: "API Check"
2+
3+
"on":
4+
workflow_dispatch: {}
5+
workflow_call:
6+
inputs:
7+
ignore_failures:
8+
description: "Ignore failures"
9+
required: false
10+
type: boolean
11+
default: false
12+
13+
secrets:
14+
GRADLE_CONFIGURATION_KEY:
15+
description: "Gradle cache key"
16+
required: false
17+
BUILDLESS_APIKEY:
18+
description: "Buildless key"
19+
required: false
20+
21+
permissions:
22+
contents: "read"
23+
24+
jobs:
25+
api-check:
26+
name: "API Check"
27+
runs-on: ubuntu-latest
28+
continue-on-error: true
29+
steps:
30+
- name: "Setup: Harden Runner"
31+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
32+
with:
33+
egress-policy: audit
34+
- name: "Setup: Checkout"
35+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
36+
with:
37+
fetch-depth: 0
38+
persist-credentials: false
39+
- name: "Setup: Cache Restore (Build)"
40+
id: cache-restore-build
41+
uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
42+
with:
43+
key: pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
44+
restore-keys: |
45+
pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
46+
pkl-v1-build-
47+
pkl-v1-
48+
pkl-
49+
path: |
50+
.gradle/
51+
build/
52+
.codebase/
53+
.kotlin/
54+
./*/build/bin
55+
./*/build/classes
56+
./*/build/kotlin
57+
./*/build/klib
58+
./*/build/generated
59+
./*/build/generated-sources
60+
- name: "Setup: Java 21"
61+
uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
62+
with:
63+
distribution: 'adopt'
64+
java-version: '21'
65+
- name: "Analysis: API Check"
66+
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
67+
continue-on-error: ${{ inputs.ignore_failures }}
68+
env:
69+
CI: true
70+
with:
71+
cache-read-only: true
72+
cache-encryption-key: ${{ secrets.GRADLE_CONFIGURATION_KEY }}
73+
arguments: |
74+
apiCheck
75+
-x test
76+
-PenableAnalysis=true

‎.github/workflows/checks.codeql.yml

Lines changed: 95 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,95 @@
1+
name: "CodeQL"
2+
3+
"on":
4+
workflow_dispatch: {}
5+
workflow_call:
6+
inputs: {}
7+
secrets:
8+
GRADLE_CONFIGURATION_KEY:
9+
description: "Gradle cache key"
10+
required: false
11+
BUILDLESS_APIKEY:
12+
description: "Buildless key"
13+
required: false
14+
15+
schedule:
16+
- cron: "0 0-23/2 * * *"
17+
18+
push:
19+
branches:
20+
- main
21+
22+
permissions:
23+
contents: read
24+
25+
jobs:
26+
analyze:
27+
name: CodeQL
28+
runs-on: ubuntu-latest
29+
continue-on-error: true
30+
permissions:
31+
actions: read
32+
contents: read
33+
security-events: write
34+
strategy:
35+
fail-fast: false
36+
matrix:
37+
language: ["java-kotlin"]
38+
steps:
39+
- name: "Setup: Harden Runner"
40+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
41+
with:
42+
egress-policy: audit
43+
- name: "Setup: Checkout"
44+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
45+
with:
46+
persist-credentials: false
47+
- name: "Setup: Cache Restore (Build)"
48+
id: cache-restore-build
49+
uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
50+
with:
51+
key: pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
52+
restore-keys: |
53+
pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
54+
pkl-v1-build-
55+
pkl-v1-
56+
pkl-
57+
path: |
58+
.gradle/
59+
build/
60+
.codebase/
61+
.kotlin/
62+
./*/build/bin
63+
./*/build/classes
64+
./*/build/kotlin
65+
./*/build/klib
66+
./*/build/generated
67+
./*/build/generated-sources
68+
- name: "Setup: Java 21"
69+
uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
70+
with:
71+
distribution: 'adopt'
72+
java-version: '21'
73+
- name: "Setup: Initialize CodeQL"
74+
uses: github/codeql-action/init@379614612a29c9e28f31f39a59013eb8012a51f0 # v3.24.3
75+
with:
76+
config-file: ./.github/codeql/codeql-config.yml
77+
languages: ${{ matrix.language }}
78+
- name: "Analysis: Build"
79+
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
80+
continue-on-error: true
81+
env:
82+
CI: true
83+
BUILDLESS_APIKEY: ${{ secrets.BUILDLESS_APIKEY }}
84+
with:
85+
cache-read-only: true
86+
cache-encryption-key: ${{ secrets.GRADLE_CONFIGURATION_KEY }}
87+
arguments: |
88+
compileKotlin
89+
compileJava
90+
assemble
91+
-x test
92+
-x check
93+
- name: "Analysis: CodeQL"
94+
uses: github/codeql-action/analyze@379614612a29c9e28f31f39a59013eb8012a51f0 # v3.24.3
95+
continue-on-error: true

‎.github/workflows/checks.dependency-review.yml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
name: "Dependencies"
2+
3+
"on":
4+
workflow_dispatch: {}
5+
workflow_call: {}
6+
7+
permissions:
8+
contents: read
9+
10+
jobs:
11+
dep-review:
12+
name: "Dependency Review"
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: "Setup: Harden Runner"
16+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
17+
with:
18+
egress-policy: audit
19+
- name: "Setup: Checkout"
20+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
21+
with:
22+
fetch-depth: 0
23+
persist-credentials: false
24+
- name: "Check: Dependency Review"
25+
uses: actions/dependency-review-action@80f10bf419f34980065523f5efca7ebed17576aa # v4.1.0
26+
continue-on-error: true
27+
if: github.event_name == 'pull_request'
28+
with:
29+
config-file: "./.github/dependency-review-config.yml"
30+
license-check: true
31+
vulnerability-check: true
32+
fail-on-severity: "low"
33+
base-ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.ref || 'main' }}

‎.github/workflows/checks.detekt.yml

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
name: "Detekt"
2+
3+
"on":
4+
workflow_dispatch: {}
5+
workflow_call:
6+
inputs: {}
7+
secrets:
8+
GRADLE_CONFIGURATION_KEY:
9+
description: "Gradle cache key"
10+
required: false
11+
BUILDLESS_APIKEY:
12+
description: "Buildless key"
13+
required: false
14+
15+
permissions:
16+
contents: "read"
17+
18+
jobs:
19+
sonar:
20+
name: "Detekt"
21+
runs-on: ubuntu-latest
22+
continue-on-error: true
23+
steps:
24+
- name: "Setup: Harden Runner"
25+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
26+
with:
27+
egress-policy: audit
28+
- name: "Setup: Checkout"
29+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
30+
with:
31+
fetch-depth: 0
32+
persist-credentials: false
33+
- name: "Setup: Cache Restore (Build)"
34+
id: cache-restore-build
35+
uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
36+
with:
37+
key: pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
38+
restore-keys: |
39+
pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
40+
pkl-v1-build-
41+
pkl-v1-
42+
pkl-
43+
path: |
44+
.gradle/
45+
build/
46+
.codebase/
47+
.kotlin/
48+
./*/build/bin
49+
./*/build/classes
50+
./*/build/kotlin
51+
./*/build/klib
52+
./*/build/generated
53+
./*/build/generated-sources
54+
- name: "Setup: Java 21"
55+
uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
56+
with:
57+
distribution: 'adopt'
58+
java-version: '21'
59+
- name: "Setup: Git History"
60+
run: git fetch --unshallow || exit 0
61+
- name: "Analysis: Detekt"
62+
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
63+
continue-on-error: true
64+
env:
65+
CI: true
66+
with:
67+
cache-read-only: true
68+
cache-encryption-key: ${{ secrets.GRADLE_CONFIGURATION_KEY }}
69+
arguments: detekt detektMergeSarif detektMergeXml -PenableAnalysis=true -PsarifReporting=true
70+
- name: "Report: SARIF Upload"
71+
uses: github/codeql-action/upload-sarif@379614612a29c9e28f31f39a59013eb8012a51f0 # v3.24.3
72+
with:
73+
sarif_file: build/reports/detekt/detekt.sarif

‎.github/workflows/checks.formatting.yml

Lines changed: 84 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,84 @@
1+
name: "Formatting"
2+
3+
"on":
4+
workflow_dispatch:
5+
inputs:
6+
## Input: Ignore Failures
7+
ignore_failures:
8+
description: "Ignore failures"
9+
required: false
10+
type: boolean
11+
default: false
12+
13+
workflow_call:
14+
inputs:
15+
ignore_failures:
16+
description: "Ignore failures"
17+
required: false
18+
type: boolean
19+
default: false
20+
21+
secrets:
22+
GRADLE_CONFIGURATION_KEY:
23+
description: "Gradle cache key"
24+
required: false
25+
BUILDLESS_APIKEY:
26+
description: "Buildless key"
27+
required: false
28+
29+
permissions:
30+
contents: "read"
31+
32+
jobs:
33+
fmt-check:
34+
name: "Formatting"
35+
runs-on: ubuntu-latest
36+
continue-on-error: true
37+
steps:
38+
- name: "Setup: Harden Runner"
39+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
40+
with:
41+
egress-policy: audit
42+
- name: "Setup: Checkout"
43+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
44+
with:
45+
fetch-depth: 0
46+
persist-credentials: false
47+
- name: "Setup: Cache Restore (Build)"
48+
id: cache-restore-build
49+
uses: actions/cache/restore@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
50+
with:
51+
key: pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
52+
restore-keys: |
53+
pkl-v1-build-${{ hashFiles('gradle/libs.versions.toml') }}
54+
pkl-v1-build-
55+
pkl-v1-
56+
pkl-
57+
path: |
58+
.gradle/
59+
build/
60+
.codebase/
61+
.kotlin/
62+
./*/build/bin
63+
./*/build/classes
64+
./*/build/kotlin
65+
./*/build/klib
66+
./*/build/generated
67+
./*/build/generated-sources
68+
- name: "Setup: Java 21"
69+
uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
70+
with:
71+
distribution: 'adopt'
72+
java-version: '21'
73+
- name: "Analysis: Formatting (Spotless)"
74+
uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0
75+
continue-on-error: ${{ inputs.ignore_failures }}
76+
env:
77+
CI: true
78+
with:
79+
cache-read-only: true
80+
cache-encryption-key: ${{ secrets.GRADLE_CONFIGURATION_KEY }}
81+
arguments: |
82+
spotlessCheck
83+
-PenableAnalysis=true
84+
-x spotlessKotlinGradleCheck

‎.github/workflows/checks.gradle-wrapper.yml

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: "Gradle Wrapper"
2+
3+
"on":
4+
workflow_dispatch: {}
5+
workflow_call: {}
6+
7+
permissions:
8+
contents: read
9+
10+
jobs:
11+
validation:
12+
name: "Gradle Wrapper"
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: "Setup: Harden Runner"
16+
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
17+
with:
18+
egress-policy: audit
19+
- name: "Setup: Checkout"
20+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
21+
with:
22+
fetch-depth: 0
23+
persist-credentials: false
24+
- name: "Check: Gradle Wrapper"
25+
uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2.1.1

0 commit comments

Comments
 (0)