Skip to content

Merge pull request #824 from sigstore/renovate/protobuf_grpc #2758

Merge pull request #824 from sigstore/renovate/protobuf_grpc

Merge pull request #824 from sigstore/renovate/protobuf_grpc #2758

Workflow file for this run

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow will build a Java project with Gradle and
# cache/restore any dependencies to improve the workflow execution time
# For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-gradle
name: Test
on:
push:
branches:
- '*'
pull_request:
branches:
- main
workflow_call: # allow this workflow to be called by other workflows
concurrency:
# On master/release, we don't want any jobs cancelled
# On PR branches, we cancel the job if new commits are pushed
# More info: https://stackoverflow.com/a/70972844/1261287
group: ${{ github.ref }}-ci
cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
jobs:
build:
strategy:
matrix:
java-version: [11, 17]
fail-fast: false
runs-on: ubuntu-latest
permissions:
id-token: write
steps:
- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
- name: Set up JDK ${{ matrix.java-version }}
uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0
with:
java-version: ${{ matrix.java-version }}
distribution: 'temurin'
- name: Setup Go environment
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
with:
go-version: '1.21.x'
# at some point this should just be replaced with something that can bring up a sigstore test env
- name: Install Fulcio
run: go install github.com/sigstore/fulcio@main
- name: Setup Gradle
uses: gradle/actions/setup-gradle@16bf8bc8fe830fa669c3c9f914d3eb147c629707 # v4.0.1
# if you need to skip staging due to flakiness use "-PskipStaging"
- name: Test sigstore-java
run: ./gradlew build
- name: Ensure sigstore-java self signing still works
run: ./gradlew sigstore-java:publishToMavenLocal -Prelease -PskipPgpSigning
- name: Test sigstore-java/sandbox
run: |
cd sandbox
./gradlew build