scan_gradle.yaml

name: Scan Gradle project
on:
  push:
  workflow_dispatch:

jobs:
  test:
    strategy:
      fail-fast: false
      matrix:
        os: [ "ubuntu-latest", "macos-latest", "windows-latest" ]
        # Test once with explicit manifest_file, and once without
        manifest_file: ["build.gradle", ""]
        include:
          - index: 1
            manifest_file: "build.gradle"
          - index: 2
            manifest_file: ""
    runs-on: ${{ matrix.os }}
    defaults:
      run:
        shell: bash
    name: Analyse Gradle project
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Java
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '20'

      - name: Install gradle dependencies
        if: matrix.os == 'windows-latest'
        run: |
          cd manifests/gradle/
          gradle dependencies
          cd ../../

      - name: RHDA Scan
        id: rhda_scan
        uses: RHEcosystemAppEng/rhda-github-action@chore/unit-tests
        with:
          manifest_directory: manifests/gradle
          manifest_file: ${{ matrix.manifest_file }}
          artifact_filename: ${{ matrix.os }}${{ matrix.index }}-rhda-report
          fail_on: never

      - name: Print JSON analysis report
        if: ${{ always() && steps.rhda_scan.outputs.rhda_report_json }}
        run: cat ${{ steps.rhda_scan.outputs.rhda_report_json }}
        shell: bash

      - name: Print SARIF analysis report
        if: ${{ always() && steps.rhda_scan.outputs.rhda_report_sarif }}
        run: cat ${{ steps.rhda_scan.outputs.rhda_report_sarif }}
        shell: bash

      - name: Print Artifact ID
        run: echo ${{ steps.rhda_scan.outputs.artifact_id }}