build_and_test.yml

# -----------------------------------------------------------------------------
# Copyright Siemens AG, 2021.
# Copyright Helio Chissini de Castro 2022-2025
# Part of the SW360 Portal Project.
#
# This program and the accompanying materials are made
# available under the terms of the Eclipse Public License 2.0
# which is available at https://www.eclipse.org/legal/epl-2.0/
#
# SPDX-License-Identifier: EPL-2.0
#
# -----------------------------------------------------------------------------

name: SW360 Build and Test

on:
  pull_request:
    branches:
      - main
    paths-ignore:
      - third-party/**
      - Dockerfile
      - docker_build.sh
      - .github/sw360_container.yml
      - .github/thrift_container.yml
  workflow_dispatch:

env:
  COUCHDB_USER: sw360
  COUCHDB_PASSWORD: sw360fossie
  THRIFT_VERSION: "0.20.0"

permissions:
  contents: read

jobs:
  build:
    name: Build and Test
    runs-on: ubuntu-24.04

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
        with:
          egress-policy: audit

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: webiny/action-conventional-commits@8bc41ff4e7d423d56fa4905f6ff79209a78776c7 # v1.3.0

      - name: Verify license headers
        run: |
          chmod +x .github/testForLicenseHeaders.sh
          bash .github/testForLicenseHeaders.sh

      - name: Setup CouchDB
        run: scripts/startCouchdbForTests.sh

      - name: Update properties with DB credentials
        run: |
          sudo mkdir -p /etc/sw360
          sudo cp ./build-configuration/test-resources/couchdb-test.properties /etc/sw360/
          sudo sed -i 's/^couchdb.user\s*=/& '${COUCHDB_USER}'/' /etc/sw360/couchdb-test.properties
          sudo sed -i 's/^couchdb.password\s*=/& '${COUCHDB_PASSWORD}'/' /etc/sw360/couchdb-test.properties

      - name: Set up JDK 21
        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
        with:
          java-version: "21"
          distribution: "temurin"
          check-latest: true

      - name: Cache Thrift
        id: cache-thrift
        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
        with:
          path: |
            ${{ github.workspace }}/dist/thrift-${{ env.THRIFT_VERSION }}
          key: ${{ runner.os }}-thrift-${{ env.THRIFT_VERSION }}
          restore-keys: |
            ${{ runner.os }}-thrift-${{ env.THRIFT_VERSION }}

      - name: Install Thrift
        if: steps.cache-thrift.outputs.cache-hit != 'true'
        run: |
          sudo apt-get update -qq
          sudo DEBIAN_FRONTEND=noninteractive apt-get install -yq build-essential libevent-dev libtool flex bison pkg-config libssl-dev git cmake
          chmod +x third-party/thrift/install-thrift.sh
          DESTDIR=${{ github.workspace }}/dist/thrift-${{ env.THRIFT_VERSION }} third-party/thrift/install-thrift.sh

      - name: Build SW360
        run: |
          export PATH=$PATH:${{ github.workspace }}/dist/thrift-${{ env.THRIFT_VERSION }}/usr/local/bin
          mvn clean install \
            --no-transfer-progress \
            -P deploy -Dhelp-docs=true \
            -Dbase.deploy.dir=. \
            -Djars.deploy.dir=${PWD}/deploy \
            -Dbackend.deploy.dir=${PWD}/deploy/webapps \
            -Drest.deploy.dir=${PWD}/deploy/webapps \
            -DRunComponentVisibilityRestrictionTest=false \
            -DRunPrivateProjectAccessTest=false \
            -DRunRestForceUpdateTest=false \
            -fae \
            -Dmaven.plugin.validation=VERBOSE

      - name: Run PrivateProjectAccessTest
        run: |
          mvn install -pl :build-configuration -am -Dbase.deploy.dir=.
          mvn -pl :datahandler test -Dtest=ProjectPermissionsVisibilityTest -DRunPrivateProjectAccessTest=true -DRunRestForceUpdateTest=true -Dbase.deploy.dir=.

      - name: Run BulkReleaseDeletingTest
        run: |
          mvn -pl :backend-components test -Dtest=BulkDeleteUtilTest -DRunPrivateProjectAccessTest=true -DRunBulkReleaseDeletingTest=true -Dbase.deploy.dir=.