feat: System-managed and RBAC support to access to KV and Storage. #106
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pull request validation | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| types: | |
| - opened | |
| - edited | |
| - synchronize | |
| jobs: | |
| pr-validation: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Find JIRA task IDs from PR title | |
| run: | | |
| temp=$(echo "${{ github.event.pull_request.title }}" | grep -o '\[[^]]*\]' | sed 's/\[//;s/\]//' | tr -d ' ') | |
| IFS=$',' read -ra keys <<< "$temp" | |
| for key in "${keys[@]}"; do | |
| echo "Key: $key" | |
| done | |
| - name: PR title validation | |
| uses: amannn/action-semantic-pull-request@c3cd5d1ea3580753008872425915e343e351ab54 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| types: | | |
| docs | |
| refactor | |
| chore | |
| fix | |
| feat | |
| breaking | |
| requireScope: false | |
| subjectPattern: ^[A-Z].+$ | |
| subjectPatternError: | | |
| The subject "{subject}" found in the pull request title "{title}" | |
| doesn't match the configured pattern. Please ensure that the subject | |
| starts with an uppercase character. | |
| wip: false | |
| - name: Checkout the source code | |
| uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab | |
| with: | |
| token: ${{ secrets.GIT_PAT }} | |
| fetch-depth: 0 | |
| - name: Cache JDK | |
| uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 | |
| id: cache-jdk | |
| with: | |
| key: OpenJDK17U-jdk_x64_linux_hotspot_17.0.7_7.tar.gz | |
| path: | | |
| ${{ runner.temp }}/jdk_setup.tar.gz | |
| ${{ runner.temp }}/jdk_setup.sha256 | |
| - name: Download JDK and verify its hash | |
| if: steps.cache-jdk.outputs.cache-hit != 'true' | |
| run: | | |
| echo "e9458b38e97358850902c2936a1bb5f35f6cffc59da9fcd28c63eab8dbbfbc3b ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256 | |
| curl -L "https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.7%2B7/OpenJDK17U-jdk_x64_linux_hotspot_17.0.7_7.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz" | |
| sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256" | |
| - name: Setup JDK | |
| uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 | |
| with: | |
| distribution: "jdkfile" | |
| jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz" | |
| java-version: "17" | |
| cache: maven | |
| - name: Cache Maven | |
| uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 | |
| id: cache-maven | |
| with: | |
| key: apache-maven-3.9.2-bin.tar.gz | |
| path: | | |
| ${{ runner.temp }}/maven_setup.tar.gz | |
| ${{ runner.temp }}/maven_setup.sha256 | |
| - name: Download Maven and verify its hash | |
| if: steps.cache-maven.outputs.cache-hit != 'true' | |
| run: | | |
| echo "809ef3220c6d179195c06c324cb9a6d34d8ecba566c5cfd8eb83167bc034117d ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256 | |
| curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.2/binaries/apache-maven-3.9.2-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz" | |
| sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256" | |
| - name: Setup Maven | |
| run: | | |
| mkdir ${{ runner.temp }}/maven | |
| tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1 | |
| echo "<settings><servers><server><id>github</id><username>${{ secrets.GIT_USER }}</username><password>${{ secrets.GIT_PAT }}</password></server></servers></settings>" >> ${{ runner.temp }}/settings.xml | |
| - name: Execute unit-test + Calculate test coverage + SCA with Sonar | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| run: ${{ runner.temp }}/maven/bin/mvn verify -Pvalidate -s ${{ runner.temp }}/settings.xml --no-transfer-progress |