using composite

build-and-test/action.yml

@@ -1,7 +1,6 @@
 name: gitea pipeline build
-run-name: ${{ gitea.actor }} started maven build on ${{ gitea.branch }}
 
-on:
+inputs:
   workflow_call:
     inputs:
       git_repository:
@@ -47,44 +46,42 @@ on:
       DTRACK_API_KEY:
         required: true
 
+runs:
+  using: 'composite'
+  steps:
+    - name: Clone repository
+      shell: bash
+      run: |
+        git clone ${{ inputs.main_uuid }} source
+        cd source
+        git checkout ${{ github.ref_name }}
 
-jobs:
+    - name: Set up JDK ${{ java_version }}
-  build:
+      uses: actions/setup-java@v5
-    name: gitea pipleine build
+      with:
-    using: 'composite'
+        distribution: ${{ java_distribution }}
+        java-version: ${{ java_version }}
+        cache: 'maven'
 
-    steps:
+    - name: Set up Maven ${{ maven_version }}
-      - name: Clone repository
+      uses: stCarolas/setup-maven@v4
-        run: |
+      with:
-          git clone ${{ inputs.main_uuid }} source
+        maven-version: ${{ maven_version }}
-          cd source
-          git checkout ${{ github.ref_name }}
 
-      - name: Set up JDK ${{ java_version }}
+    - name: Build with Maven
-        uses: actions/setup-java@v5
+      working-directory: source
-        with:
+      shell: bash
-          distribution: ${{ java_distribution }}
+      run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ secrets.SONAR_TOKEN }}"
-          java-version: ${{ java_version }}
-          cache: 'maven'
 
-      - name: Set up Maven ${{ maven_version }}
+    - name: Upload SBOM to DTrack
-        uses: stCarolas/setup-maven@v4
+      uses: DependencyTrack/gh-upload-sbom@v3
-        with:
+      with:
-          maven-version: ${{ maven_version }}
+        serverhostname: ${{ dtrack_host_name }}
-
+        protocol: ${{ inputs.dtrack_protocol }}
-      - name: Build with Maven
+        port: ${{ inputs.dtrack_port }}
-        working-directory: source
+        apikey: ${{ secrets.DTRACK_API_KEY }}
-        run: mvn -B clean verify sonar:sonar org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom -Dsonar.host.url="${{ inputs.sonar_host }}" -Dsonar.token="${{ secrets.SONAR_TOKEN }}"
+        project: ${{ inputs.dtrack_project_uuid }}
-
+        bomfilename: ${{ inputs.dtrack_bom_file }}
-      - name: Upload SBOM to DTrack
-        uses: DependencyTrack/gh-upload-sbom@v3
-        with:
-          serverHostname: ${{ dtrack_host_name }}
-          protocol: ${{ inputs.dtrack_protocol }}
-          port: ${{ inputs.dtrack_port }}
-          apiKey: ${{ secrets.DTRACK_API_KEY }}
-          project: ${{ inputs.dtrack_project_uuid }}
-          bomFilename: ${{ inputs.dtrack_bom_file }}