build.yml

name: CI checks

on:
  push:
    branches:
      - main
      - 'releases/**'
  pull_request:

jobs:
  assemble:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: 17
          distribution: zulu
          cache: gradle

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Run :assemble task
        run: ./gradlew assemble

  checks:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: 17
          distribution: zulu
          cache: gradle

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Run :check task
        run: ./gradlew check --continue

      - uses: github/codeql-action/upload-sarif@v3
        if: ${{ always() }}
        with:
          sarif_file: ${{ github.workspace }}/build/reports/static-analysis.sarif
          checkout_path: ${{ github.workspace }}