first commit

Author: tim-mwangi

.circleci/config.yml

@@ -0,0 +1,109 @@
+version: 2.1
+
+orbs:
+  codecov: codecov/codecov@1
+  snyk: snyk/[email protected]
+
+executors:
+  java:
+    docker:
+      - image: cimg/openjdk:11.0
+    environment:
+      JVM_OPTS: -Xmx2g
+      TERM: dumb
+
+commands:
+  gradle:
+    description: 'Run the provided gradle command'
+    parameters:
+      args:
+        type: string
+      when:
+        default: "on_success"
+        type: enum
+        enum: ["on_fail", "on_success", "always"]
+    steps:
+      - run:
+          name: << parameters.args >>
+          command: ./gradlew << parameters.args >> --info --max-workers=2 --continue
+          when: << parameters.when >>
+  setup_build_environment:
+    description: 'Generates cache key from a hash of all gradle files'
+    steps:
+      - checkout
+      - run:
+          name: Generate cache key
+          command: find . -type f -name "*.gradle*" -o -name "gradle-wrapper*" -exec shasum {} + | sort > /tmp/checksum.txt && cat /tmp/checksum.txt
+      - restore_cache:
+          keys:
+            - v1-dependencies-{{ checksum "/tmp/checksum.txt" }}
+            # fallback to using the latest cache if no exact match is found
+            - v1-dependencies-
+  populate_and_save_cache:
+    description: 'Downloads all gradle dependencies and uploads cache for later use'
+    steps:
+      - gradle:
+          args: downloadDependencies
+      - save_cache:
+          paths:
+            - ~/.gradle
+          key: v1-dependencies-{{ checksum "/tmp/checksum.txt" }}
+
+jobs:
+  build:
+    executor: java
+    steps:
+      - setup_build_environment
+      - populate_and_save_cache
+      - gradle:
+          args: build
+      - gradle:
+          args: jacocoTestReport
+      - gradle:
+          args: copyAllReports --output-dir=/tmp/test-reports
+          when: always
+      - codecov/upload
+      - store_test_results:
+          path: /tmp/test-reports
+      - store_artifacts:
+          path: /tmp/test-reports
+          destination: reports
+
+  publish:
+    executor: java
+    steps:
+      - setup_build_environment
+      - gradle:
+          args: :tag -Prelease
+      - add_ssh_keys:
+          fingerprints:
+            - '19:e7:38:2f:12:38:b0:c6:67:91:c6:4a:d2:7b:c6:53'
+      - run: git push origin $(./gradlew -q :printVersion)
+      - gradle:
+          args: publish
+  snyk-scan:
+    executor:
+      name: java
+    environment:
+      GRADLE_OPTS: -Dorg.gradle.workers.max=1 # Snyk doesn't handle parallelism well
+    steps:
+      - setup_build_environment
+      - snyk/scan:
+          additional-arguments: --all-sub-projects
+
+workflows:
+  version: 2
+  build-and-publish:
+    jobs:
+      - build
+      - snyk-scan:
+          context: hypertrace-vulnerability-scanning
+      - publish:
+          context: hypertrace-publishing
+          requires:
+            - build
+            - snyk-scan
+          filters:
+            branches:
+              only:
+                - master

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Each line is a file pattern followed by one or more owners.
+
+# global
+* @buchi-busireddy @tim-mwangi @surajpuvvada @avinashkolluru

.gitignore

@@ -0,0 +1,7 @@
+# Ignore Gradle project-specific cache directory
+.gradle
+
+# Ignore Gradle build output directory
+build
+
+.idea