ci.yaml

name: CI Verification, SonarCloud Analysis, and CodeQL

on:
  push:
    branches: [main, develop]

  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  verify-and-test:
    name: Code Format and Tests Verification
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up JDK ${{ vars.JAVA_VERSION }}
        uses: actions/setup-java@v4
        with:
          java-version: ${{ vars.JAVA_VERSION }}
          distribution: 'temurin'
          cache: 'maven'

      - name: Verify code and apply tests
        run: ./mvnw verify

  sonarcloud:
    name: SonarCloud Code Analysis
    runs-on: ubuntu-latest
    needs: verify-and-test
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up JDK ${{ vars.JAVA_VERSION }}
        uses: actions/setup-java@v4
        with:
          java-version: ${{ vars.JAVA_VERSION }}
          distribution: 'temurin'
          cache: 'maven'

      - name: Compile the code
        run: ./mvnw compile

      - name: Perform the scan
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        run: ./mvnw -B sonar:sonar -Dsonar.projectKey=${{ secrets.SONAR_PROJECT_KEY }}