spotbugs-analysis.yml

name: Code Analysis (SpotBugs)

on:
  pull_request:
  push:
  workflow_dispatch:

jobs:
  dupe_check:
    name: Check for Duplicate Workflow Run
    runs-on: ubuntu-latest
    outputs:
      should_skip: ${{ steps.skip_check.outputs.should_skip }}
    steps:
      - id: skip_check
        uses: fkirc/skip-duplicate-actions@v3.4.0
        with:
          concurrent_skipping: same_content
          do_not_skip: '["pull_request", "workflow_dispatch", "schedule"]'

  run-analysis:
    name: Run SpotBugs Static Code Analysis
    needs:
      - dupe_check
    if: needs.dupe_check.outputs.should_skip != 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          submodules: recursive
      - name: Cache local Maven repository
        uses: actions/cache@v2
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-spotbugs-${{ hashFiles('**/pom.xml') }}
          restore-keys: |
            ${{ runner.os }}-maven-spotbugs-
      - name: Setup JDK 8
        uses: actions/setup-java@v2
        with:
          distribution: zulu
          java-version: 8
      - name: Install Test Support
        run: mvn clean install -f solace-integration-test-support/ -DskipTests
      - name: Run static code analysis
        run: mvn clean compile spotbugs:check
      - name: Upload Test Artifacts
        if: always()
        uses: actions/upload-artifact@v2
        with:
          name: Static Code Analysis Results
          path: |
            beam-sdks-java-io-solace/target/spotbugs.xml
            beam-sdks-java-io-solace/target/spotbugsXml.xml

      # Migrate this to upload-sarif action once https://github.com/spotbugs/spotbugs-maven-plugin/pull/339 is released
      - name: Publish SpotBugs report
        if: success() || failure()
        uses: jwgmeligmeyling/spotbugs-github-action@v1.2
        with:
          name: SpotBugs
          path: beam-sdks-java-io-solace/target/spotbugsXml.xml
          title: SpotBugs Source Code Analyzer report