iroha2-pr.yml

name: Iroha2-java pull requests workflow

on:
  pull_request:
    branches: [ iroha2-dev, iroha2-main ]
  push:
    branches: feature/DOPS-3309/sonar-dojo

jobs:
  build:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'liberica'
      - name: Cache Gradle packages
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-
      - name: Build with Gradle
        run: |
          ./gradlew build testCoverage sonar -Dsonar.token=${{ secrets.SONAR_TOKEN }}
      - name: Upload build reports
        if: failure()
        uses: actions/upload-artifact@v3
        with:
          name: build-reports
          path: /home/runner/work/iroha-java/iroha-java/**/index.html
      - name: Cleanup Gradle Cache
        # Remove some files from the Gradle cache, so they aren't cached by GitHub Actions.
        # Restoring these files from a GitHub Actions cache might cause problems for future builds.
        run: |
          rm -f ~/.gradle/caches/modules-2/modules-2.lock
          rm -f ~/.gradle/caches/modules-2/gc.properties

  # sonarqube-defectdojo:
  #   runs-on: ubuntu-latest
  #   steps:
  #     - uses: actions/checkout@v4
  #     - name: Set up JDK 17
  #       uses: actions/setup-java@v3
  #       with:
  #         java-version: '17'
  #         distribution: 'liberica'
  #     - name: Cache Gradle packages
  #       uses: actions/cache@v3
  #       with:
  #         path: |
  #           ~/.gradle/caches
  #           ~/.gradle/wrapper
  #         key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
  #         restore-keys: |
  #           ${{ runner.os }}-gradle-
  #     - name: Test Sonarqube with Gradle
  #       run: gradle test testCoverage sonarqube -Dsonar.token=${{ secrets.SONAR_TOKEN }}
  #     - name: DefectDojo
  #       if: always()
  #       uses: C4tWithShell/defectdojo-action@1.0.4
  #       with:
  #         token: ${{ secrets.DEFECTOJO_TOKEN }}
  #         defectdojo_url: ${{ secrets.DEFECTOJO_URL }}
  #         product_type: iroha2
  #         engagement: ${{ github.ref_name }}
  #         tools: "SonarQube API Import,Github Vulnerability Scan"
  #         sonar_projectKey: hyperledger:iroha-java
  #         github_token: ${{ secrets.GITHUB_TOKEN }}
  #         github_repository: ${{ github.repository }}
  #         product: ${{ github.repository }}
  #         environment: Test
  #         reports: '{"Github Vulnerability Scan": "github.json"}'