CI.yml

name: CI

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

env:
  GRADLE_OPTS: -Dorg.gradle.caching=true

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      security-events: write

    steps:
      - uses: actions/checkout@v4
      - name: Dependency Review
        uses: actions/dependency-review-action@v4
        if: github.event_name == 'pull_request'
      - uses: gradle/actions/setup-gradle@v3
        with:
          dependency-graph: generate-and-submit
          gradle-home-cache-cleanup: true
      - name: Build with Gradle
        run: ./gradlew build
      - name: Detekt
        run: ./gradlew detekt
        if: success() || failure()
      - name: Upload SARIF to Github using the upload-sarif action
        uses: github/codeql-action/upload-sarif@v3
        if: success() || failure()
        with:
          sarif_file: build/reports/detekt/detekt.sarif