build.yml

name: Build

env:
  MAVEN_VERSION: "3.9.11"

on:
  workflow_dispatch: # Allow manual trigger
  pull_request:
    branches: ["main"]
  push:
    branches: ["main"]
permissions:
  contents: write
  id-token: write

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        java-version: ["17.0.18", "21.0.9"]
    steps:
      - name: Checkout
        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
      - name: Build
        uses: ./.github/actions/build
        with:
          java-version: ${{ matrix.java-version }}
          maven-version: ${{ env.MAVEN_VERSION }}
      - name: Sonar Scan
        uses: ./.github/actions/scan-with-sonar
        if: matrix.java-version == '21.0.9'
        with:
          java-version: 21
          maven-version: ${{ env.MAVEN_VERSION }}
          sonarq-token: ${{ secrets.SONAR_TOKEN }}
          github-token: ${{ secrets.GITHUB_TOKEN }}