ci.yml

name: CI
on:
  push:
    paths-ignore:
      - "**.md"
      - ".gitignore"
      - "LICENCE"
      - "CODEOWNERS"
    branches:
      - '*'
      - '!master'
jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses:  snyk/actions/gradle@master
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          command: test --severity-threshold=high

  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-java@v2
        with:
          distribution: 'temurin'
          java-version: '19'
          cache: 'gradle'
      - name: build
        run: gradle build
      - name: integration tests
        env:
          PAT_READ_TOKEN: ${{ secrets.READER_TOKEN }}
        run: |
          set -e
          echo "$PAT_READ_TOKEN" | docker login -u USERNAME --password-stdin ghcr.io
          docker-compose stop
          docker-compose rm -f
          docker-compose up -d --build
          ./wait-for-integration.sh gradle integration