ci-java.yml

name: Java CI
on:
  push:
    branches: [main]
    paths: ['src/**', 'pom.xml']
  pull_request:
    branches: [main]

permissions: read-all

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
        with:
          fetch-depth: 0
      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v4.7.1
        with:
          distribution: 'temurin'
          java-version: '25'
          cache: 'maven'
      - name: Build + verify (jacoco 85% + SpotBugs)
        run: mvn -B -ntp clean verify
      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4.6.2
        if: always()
        with:
          name: test-results
          path: target/surefire-reports/
      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v4.6.2
        with:
          name: coverage-report
          path: target/site/jacoco/