Update GitHub actions

keeps · Nov 29, 2024 · 2faf7d8 · 2faf7d8
1 parent 0e05344
commit 2faf7d8
Show file tree

Hide file tree

Showing 2 changed files with 251 additions and 0 deletions.
diff --git a/.github/workflows/latest.yml b/.github/workflows/latest.yml
@@ -0,0 +1,104 @@
+name: Release
+on:
+    push:
+        tags-ignore:
+            - "**"
+        branches:
+            - "main"
+
+env:
+    MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version"
+
+jobs:
+  continuous-integration:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+          cache: 'maven'
+      - name: Set up Maven
+        uses: stCarolas/setup-maven@v5
+        with:
+          maven-version: 3.9.6
+      - name: Test
+        run: mvn $MAVEN_CLI_OPTS test
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build library
+        run: mvn $MAVEN_CLI_OPTS clean package -DskipTests
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build CLI
+        run: mvn $MAVEN_CLI_OPTS clean package -Pcli -DskipTests
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload job artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: artifact
+          path: target/*.jar
+          if-no-files-found: error
+          retention-days: 5
+
+  deploy-package:
+    runs-on: ubuntu-latest
+    needs: continuous-integration
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+          cache: 'maven'
+      - name: Set up Maven
+        uses: stCarolas/setup-maven@v5
+        with:
+          maven-version: 3.9.6
+      - name: Deploy to GitHub packages
+        run: mvn $MAVEN_CLI_OPTS clean deploy -Dmaven.test.skip=true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  deploy-docker:
+    runs-on: ubuntu-latest
+    needs: continuous-integration
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: artifact
+          path: docker/target
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      #- name: Login to DockerHub container registry
+      #  uses: docker/login-action@v3
+      #  with:
+      #    username: ${{ secrets.DOCKERHUB_USERNAME }}
+      #    password: ${{ secrets.DOCKERHUB_PASSWORD }}
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build
+        uses: docker/build-push-action@v5
+        with:
+          context: docker
+          push: true
+          tags: |
+            ghcr.io/keeps/commons-ip-cits-erms:latest
+          #          keeps/commons-ip-cits-erms
+          sbom: true
+          provenance: mode=max
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -0,0 +1,147 @@
+name: Release
+on:
+    push:
+        tags:
+            - "v*"
+        branches-ignore:
+            - "**"
+
+env:
+    MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version"
+
+jobs:
+  continuous-integration:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+          cache: 'maven'
+      - name: Set up Maven
+        uses: stCarolas/setup-maven@v5
+        with:
+          maven-version: 3.9.6
+      - name: Test
+        run: mvn $MAVEN_CLI_OPTS test
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build library
+        run: mvn $MAVEN_CLI_OPTS clean package -DskipTests
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build CLI
+        run: mvn $MAVEN_CLI_OPTS clean package -Pcli -DskipTests
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload job artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: artifact
+          path: target/*.jar
+          if-no-files-found: error
+          retention-days: 5
+
+  deploy-package:
+    runs-on: ubuntu-latest
+    needs: continuous-integration
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+          cache: 'maven'
+      - name: Set up Maven
+        uses: stCarolas/setup-maven@v5
+        with:
+          maven-version: 3.9.6
+      - name: Deploy to GitHub packages
+        run: mvn $MAVEN_CLI_OPTS clean deploy -Dmaven.test.skip=true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  deploy-docker:
+    runs-on: ubuntu-latest
+    needs: continuous-integration
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: artifact
+          path: docker/target
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      #- name: Login to DockerHub container registry
+      #  uses: docker/login-action@v3
+      #  with:
+      #    username: ${{ secrets.DOCKERHUB_USERNAME }}
+      #    password: ${{ secrets.DOCKERHUB_PASSWORD }}
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ghcr.io/keeps/commons-ip-cits-erms
+          #            keeps/roda
+          tags: |
+            type=semver,pattern=v{{version}}
+            type=semver,pattern=v{{major}}.{{minor}}
+            type=semver,pattern=v{{major}}
+          flavor: |
+            latest=false
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build
+        uses: docker/build-push-action@v5
+        with:
+          context: docker
+          push: true
+          tags: |
+            ghcr.io/keeps/commons-ip-cits-erms
+          #          keeps/commons-ip-cits-erms
+          sbom: true
+          provenance: mode=max
+
+  release:  
+    runs-on: ubuntu-latest
+    needs: [deploy-package, deploy-docker]
+    steps:
+      - name: Get release version
+        run: echo "release_version=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_ENV
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: artifact
+          path: target
+      - name: Upload artifact to release
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: target/${{ env.release_version }}.jar
+          asset_name: commons-ip-cits-erms-cli-${{ env.release_version }}.jar
+          tag: ${{ github.ref }}
+          release_name: ${{ github.ref_name }}
+          draft: true
+          body: |
+            #### New features 
+            
+            #### Enhancements 
+            
+            #### Bug fixes
+            
+            #### Security
+            - Several dependency major upgrades to fix security vulnerabilities