iroha2-pr.yml

name: Iroha2-java pull requests workflow

on:
  pull_request:
    branches: [ iroha2-dev, iroha2-main ]
  push:
    branches: feature/DOPS-3309/sonar-dojo

jobs:
  # build:
  #   runs-on: ubuntu-latest
  #   steps:
  #     - uses: actions/checkout@v4
  #     - name: Set up JDK 17
  #       uses: actions/setup-java@v3
  #       with:
  #         java-version: '17'
  #         distribution: 'liberica'
  #     - name: Cache Gradle packages
  #       uses: actions/cache@v3
  #       with:
  #         path: |
  #           ~/.gradle/caches
  #           ~/.gradle/wrapper
  #         key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
  #         restore-keys: |
  #           ${{ runner.os }}-gradle-
  #     - name: Build with Gradle
  #       run: ./gradlew build --info
  #     - name: Upload build reports
  #       if: failure()
  #       uses: actions/upload-artifact@v3
  #       with:
  #         name: build-reports
  #         path: /home/runner/work/iroha-java/iroha-java/**/index.html
  #     - name: Cleanup Gradle Cache
  #       # Remove some files from the Gradle cache, so they aren't cached by GitHub Actions.
  #       # Restoring these files from a GitHub Actions cache might cause problems for future builds.
  #       run: |
  #         rm -f ~/.gradle/caches/modules-2/modules-2.lock
  #         rm -f ~/.gradle/caches/modules-2/gc.properties

  sonarqube-defectdojo:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'liberica'
      - name: Cache Gradle packages
        uses: actions/cache@v3
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-
      - name: Test Sonarqube with Gradle
        run: ./gradlew clean test --continue jacocoTestReport sonarqube -Dsonar.token=${{ secrets.SONAR_TOKEN }}
      # - name: SonarQube
      #   uses: sonarsource/sonarqube-scan-action@master
      #   env:
      #     SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
      #     SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
      #   with:
      #     args: >
      #       -Dcommunity.rust.clippy.reportPaths=lints/clippy.json
      #       -Dcommunity.rust.lcov.reportPaths=lints/lcov.info
      # - name: DefectDojo
      #   id: defectdojo
      #   uses: C4tWithShell/defectdojo-action@1.0.4
      #   with:
      #     token: ${{ secrets.DEFECTOJO_TOKEN }}
      #     defectdojo_url: ${{ secrets.DEFECTOJO_URL }}
      #     product_type: iroha2-java
      #     engagement: ${{ github.ref_name }}
      #     tools: "SonarQube API Import,Github Vulnerability Scan"
      #     sonar_projectKey: hyperledger:iroha-java
      #     github_token: ${{ secrets.GITHUB_TOKEN }}
      #     github_repository: ${{ github.repository }}
      #     product: ${{ github.repository }}
      #     environment: Test
      #     reports: '{"Github Vulnerability Scan": "github.json"}'