Skip to content

Bump org.assertj:assertj-core from 3.27.4 to 3.27.6 #65

Bump org.assertj:assertj-core from 3.27.4 to 3.27.6

Bump org.assertj:assertj-core from 3.27.4 to 3.27.6 #65

Workflow file for this run

# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
name: Build CBOMkit Library
permissions:
contents: write
packages: write
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
release:
types: [ "published" ]
workflow_dispatch:
env:
REGISTRY: "ghcr.io"
ORG: "PQCA"
IMAGE_NAME: "cbomkit"
jobs:
build:
runs-on: ubuntu-latest
services:
postgres:
image: postgres:16-alpine
env:
POSTGRES_DB: postgres
POSTGRES_PASSWORD: cbomkit
POSTGRES_USER: cbomkit
options: >-
--health-cmd pg_isready
--health-interval 10s
--health-timeout 5s
--health-retries 5
ports:
- 5432:5432
steps:
- name: Checkout repository
uses: actions/checkout@v5
- name: Set up JDK 21
uses: actions/setup-java@v5
with:
java-version: '21'
distribution: 'temurin'
- name: Create Maven settings.xml
run: |
echo "<settings>
<servers>
<server>
<id>github</id>
<username>${{ github.actor }}</username>
<password>${{ secrets.GITHUB_TOKEN }}</password>
</server>
<server>
<id>app-bootstrap</id>
<username>${{ github.actor }}</username>
<password>${{ secrets.GITHUB_TOKEN }}</password>
</server>
</servers>
</settings>" > ~/.m2/settings.xml
- name: Build and Publish to Github Packages
run: mvn --batch-mode clean package deploy
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Create CBOM
uses: PQCA/cbomkit-action@v2.1.1
id: cbom
# Persist CBOM after a job has completed and share
# that CBOM with another job in the same workflow.
- name: Commit changes to new branch
uses: actions/upload-artifact@v4
with:
name: "CBOM"
path: ${{ steps.cbom.outputs.pattern }}
if-no-files-found: warn