build.yml

name: Build CI

on:
  push:
    tags: [ '[0-9]+.[0-9]+.[0-9]+' ]
    branches: [ main ]
  pull_request:
    branches: [ main ]
    types: [ opened, reopened, synchronize ]
    paths:
      - .github/workflows/**
      - gradle/**
      - kata/**
      - build.gradle.kts
      - settings.gradle.kts
      - gradle.properties
  workflow_dispatch:
    inputs:
      ref_name:
        description: Branch, tag or SHA to checkout
      job_count:
        description: Max concurrent jobs to execute

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: true

jobs:
  fork:
    runs-on: ubuntu-22.04
    timeout-minutes: 1
    outputs:
      job_count: ${{ steps.job.outputs.count }}
      job_sid: ${{ steps.job.outputs.sid }}
    steps:
      - name: Assign job IDs
        id: job
        run: |
          # set default as inputs resolve only at manual executions
          JOB_COUNT=${{ github.event.inputs.job_count || 40 }}
          echo "count=$JOB_COUNT" >> $GITHUB_OUTPUT
          echo "sid=[`seq -s , 1 $JOB_COUNT`]" >> $GITHUB_OUTPUT

  # ------------------------
  test:
    needs: fork
    runs-on: ubuntu-22.04
    timeout-minutes: 8
    strategy:
      matrix:
        job_sid: ${{ fromJSON(needs.fork.outputs.job_sid) }}
    steps:
      - name: Checkout repository (default ref)
        if: ${{ github.event.inputs.ref_name == '' }}
        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2

      - name: Checkout repository (custom ref)
        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
        if: ${{ github.event.inputs.ref_name != '' }}
        with:
          ref: ${{ github.event.inputs.ref_name }}

      - name: Setup Java
        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
        with:
          distribution: temurin
          java-version: 17

      - name: Test project
        uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0
        with:
          gradle-home-cache-cleanup: true
          arguments: |
            test jacocoTestReport -x processResources -x processTestResources
            --parallel
            --configuration-cache
            --build-cache
            --no-daemon
            --scan
            -DforkCount=${{ needs.fork.outputs.job_count }}
            -DforkSid=${{ matrix.job_sid }}
            -Dsonar.gradle.skipCompile=true

      - name: Pack fork artifacts
        run: |
          find . -path "*/main/*.class" -o -path "*/test/*.class" -o -path "*/jacocoTestReport.xml" > artifacts
          tar czfT artifacts.tar.gz artifacts

      - name: Upload fork artifacts
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
        with:
          name: fork-${{ matrix.job_sid }}
          retention-days: 1
          path: artifacts.tar.gz

  # ------------------------
  scan:
    needs: test
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: write
      pull-requests: write
    env:
      VERSION: 1.23.0
    steps:
      - name: Checkout repository (default ref)
        if: ${{ github.event.inputs.ref_name == '' }}
        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
        with:
          fetch-depth: 0

      - name: Checkout repository (custom ref)
        if: ${{ github.event.inputs.ref_name != '' }}
        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
        with:
          ref: ${{ github.event.inputs.ref_name }}

      - name: Download fork artifacts
        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4

      - name: Unpack fork artifacts
        run: for f in fork-*/artifacts.tar.gz; do tar xf $f && rm $f; done

      - name: Setup Java
        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
        with:
          distribution: temurin
          java-version: 17

      - name: Analyze code quality (main)
        if: startsWith(github.event_name, 'pull_request') == false
        uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0
        with:
          gradle-home-cache-cleanup: true
          dependency-graph: generate-and-submit
          arguments: |
            sonar -x compileJava -x compileTestJava
            --parallel
            --configuration-cache
            --build-cache
            --no-daemon
            --scan
            -Pversion=${{ format('{0}+{1}', env.VERSION, github.RUN_NUMBER) }}
            -Dsonar.host.url=https://sonarcloud.io
            -Dsonar.token=${{ secrets.SONAR_TOKEN }}
            -Dsonar.organization=${{ secrets.SONAR_KEY }}
            -Dsonar.branch.name=${{ github.event.inputs.ref_name || github.REF_NAME }}
            -Dsonar.qualitygate.wait=true
            -Dsonar.gradle.skipCompile=true

      - name: Analyze code quality (PR)
        if: startsWith(github.event_name, 'pull_request')
        uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0
        with:
          gradle-home-cache-cleanup: true
          add-job-summary-as-pr-comment: always
          arguments: |
            sonar -x compileJava -x compileTestJava
            --parallel
            --configuration-cache
            --build-cache
            --no-daemon
            --scan
            -Pversion=${{ format('{0}+{1}', env.VERSION, github.RUN_NUMBER) }}
            -Dsonar.host.url=https://sonarcloud.io
            -Dsonar.token=${{ secrets.SONAR_TOKEN }}
            -Dsonar.organization=${{ secrets.SONAR_KEY }}
            -Dsonar.pullrequest.provider=github
            -Dsonar.pullrequest.branch=${{ github.HEAD_REF }}
            -Dsonar.pullrequest.base=${{ github.BASE_REF }}
            -Dsonar.pullrequest.key=${{ github.event.number }}
            -Dsonar.qualitygate.wait=true
            -Dsonar.gradle.skipCompile=true