scan_maven.yaml

name: Scan Maven project
on:
  push:
  workflow_dispatch:

jobs:
  test:
    strategy:
      fail-fast: false
      matrix:
        # os: [ "macos-latest", "windows-latest", "ubuntu-20.04" ]
        os: [ "macos-latest", "windows-latest", "ubuntu-latest" ]
        # Test once with explicit manifest_file, and once without
        manifest_file: [ "pom.xml", "" ]
    runs-on: ${{ matrix.os }}
    defaults:
      run:
        shell: bash
    name: Analyse Maven project
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '20'

      - name: RHDA Scan
        id: rhda_scan
        uses: RHEcosystemAppEng/rhda-github-action@main
        with:
          manifest_directory: manifests/maven
          manifest_file: ${{ matrix.manifest_file }}
          rhda_report_name: rhda-maven-report
          fail_on: never

      - name: Print JSON analysis report
        if: ${{ always() && steps.scan.outputs.crda_report_json }}
        run: cat ${{ steps.scan.outputs.crda_report_json }}

      - name: Print SARIF analysis report
        if: ${{ always() && steps.scan.outputs.crda_report_sarif }}
        run: cat ${{ steps.scan.outputs.crda_report_sarif }}

      - name: Print Artifact ID
        run: echo ${{ steps.scan.outputs.artifact_id }}