diff --git a/build-and-test/action.yml b/build-and-test/action.yml index d3db692..744b8d6 100644 --- a/build-and-test/action.yml +++ b/build-and-test/action.yml @@ -1,7 +1,6 @@ name: gitea pipeline build -run-name: ${{ gitea.actor }} started maven build on ${{ gitea.branch }} -on: +inputs: workflow_call: inputs: git_repository: @@ -47,44 +46,42 @@ on: DTRACK_API_KEY: required: true +runs: + using: 'composite' + steps: + - name: Clone repository + shell: bash + run: | + git clone ${{ inputs.main_uuid }} source + cd source + git checkout ${{ github.ref_name }} -jobs: - build: - name: gitea pipleine build - using: 'composite' + - name: Set up JDK ${{ java_version }} + uses: actions/setup-java@v5 + with: + distribution: ${{ java_distribution }} + java-version: ${{ java_version }} + cache: 'maven' - steps: - - name: Clone repository - run: | - git clone ${{ inputs.main_uuid }} source - cd source - git checkout ${{ github.ref_name }} + - name: Set up Maven ${{ maven_version }} + uses: stCarolas/setup-maven@v4 + with: + maven-version: ${{ maven_version }} - - name: Set up JDK ${{ java_version }} - uses: actions/setup-java@v5 - with: - distribution: ${{ java_distribution }} - java-version: ${{ java_version }} - cache: 'maven' + - name: Build with Maven + working-directory: source + shell: bash + run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ secrets.SONAR_TOKEN }}" - - name: Set up Maven ${{ maven_version }} - uses: stCarolas/setup-maven@v4 - with: - maven-version: ${{ maven_version }} - - - name: Build with Maven - working-directory: source - run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ secrets.SONAR_TOKEN }}" - - - name: Upload SBOM to DTrack - uses: DependencyTrack/gh-upload-sbom@v3 - with: - serverHostname: ${{ dtrack_host_name }} - protocol: ${{ inputs.dtrack_protocol }} - port: ${{ inputs.dtrack_port }} - apiKey: ${{ secrets.DTRACK_API_KEY }} - project: ${{ inputs.dtrack_project_uuid }} - bomFilename: ${{ inputs.dtrack_bom_file }} + - name: Upload SBOM to DTrack + uses: DependencyTrack/gh-upload-sbom@v3 + with: + serverhostname: ${{ dtrack_host_name }} + protocol: ${{ inputs.dtrack_protocol }} + port: ${{ inputs.dtrack_port }} + apikey: ${{ secrets.DTRACK_API_KEY }} + project: ${{ inputs.dtrack_project_uuid }} + bomfilename: ${{ inputs.dtrack_bom_file }}