build.yaml

name: 'Build Kotlin AWS CDK DSL'
on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "*" ]
env:
  GRADLE_BUILD_ACTION_CACHE_DEBUG_ENABLED: 'false'
  ORG_GRADLE_PROJECT_signingKey: '${{ secrets.SIGNING_KEY }}'
  ORG_GRADLE_PROJECT_signingPassword: '${{ secrets.SIGNING_PASSWORD }}'
  ORG_GRADLE_PROJECT_sonatypeUsername: '${{ secrets.SONATYPEUSERNAME }}'
  ORG_GRADLE_PROJECT_sonatypePassword: '${{ secrets.SONATYPEPASSWORD }}'
jobs:
  build:
    runs-on:
    - 'xlarge_runner'
    permissions:
      id-token: write
      contents: write
      checks: write
      statuses: write
    steps:
    # https://github.com/hmarr/debug-action
    - uses: 'hmarr/debug-action@cd1afbd7852b7ad7b1b7a9a1b03efebd3b0a1820' # v3.0.0

    # https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions
    - uses: 'zgosalvez/github-actions-ensure-sha-pinned-actions@38608ef4fb69adae7f1eac6eeb88e67b7d083bfd' # v3.0.16

    # https://github.com/actions/checkout
    - name: 'checkout'
      uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # v4.2.2

    # https://github.com/actions/setup-java
    - name: 'Set up JDK'
      uses: 'actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b' # v4.5.0
      with:
        java-version: '17'
        distribution: 'temurin'
        check-latest: 'true'

    # https://github.com/gradle/actions/tree/main/setup-gradle
    - name: 'Set up Gradle'
      uses: 'gradle/actions/setup-gradle@d156388eb19639ec20ade50009f3d199ce1e2808' # v4
      with:
        gradle-version: 'wrapper'
        gradle-home-cache-includes: |-
          jdks
          caches
          notifications
        gradle-home-cache-cleanup: 'true'
        validate-wrappers: true

      # https://github.com/gradle/actions/tree/main/dependency-submission
    - name: "Generate and submit dependency graph"
      uses: "gradle/actions/dependency-submission@d156388eb19639ec20ade50009f3d199ce1e2808" # v4
      env:
        DEPENDENCY_GRAPH_EXCLUDE_PROJECTS: "^:(build-logic|buildSrc|.*[Tt]test.*)"
        DEPENDENCY_GRAPH_EXCLUDE_CONFIGURATIONS: ".*[Tt]est.*Classpath"

    - name: 'build'
      run: './gradlew build --info --scan --stacktrace'

    - name: 'publish'
      run: './gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository --info --no-configuration-cache --stacktrace'