GFB-24 Migrates CI to GitHub Actions (#58)

Author: alexandre-odoux-sonarsource

.cirrus.star

@@ -0,0 +1,49 @@
+name: Build
+on:
+  push:
+    branches:
+      - master
+      - 'branch-*'
+  pull_request:
+  merge_group:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  build:
+    name: Build
+    runs-on: github-ubuntu-latest-s
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+        with:
+          version: 2025.7.12
+      - uses: SonarSource/ci-github-actions/build-gradle@v1
+        with:
+          artifactory-reader-role: private-reader
+          artifactory-deployer-role: qa-deployer
+          deploy-pull-request: true
+      - name: Upload build reports on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-reports
+          path: '**/build/reports/**/*'
+          if-no-files-found: ignore
+      - name: Upload test results on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-results
+          path: '**/test-results/**/*.xml'
+          if-no-files-found: ignore

.cirrus.yml

@@ -0,0 +1,26 @@
+name: Promote
+on:
+  workflow_run:
+    workflows: [Build]
+    types: [completed]
+    branches:
+      - master
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  promote:
+    name: Promote
+    if: |
+      github.event.workflow_run.conclusion == 'success' &&
+      github.repository_owner == 'SonarSource'
+    runs-on: github-ubuntu-latest-s
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+        with:
+          version: 2025.7.12
+      - uses: SonarSource/ci-github-actions/promote-gradle@v1

.github/workflows/build.yml

@@ -176,7 +176,7 @@ signing {
     def signingPassword = findProperty("signingPassword")
     useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
     required {
-        def branch = System.getenv()["CIRRUS_BRANCH"]
+        def branch = System.getenv()["GITHUB_REF_NAME"]
         return (branch == 'master' || branch ==~ 'branch-[\\d.]+') &&
                 gradle.taskGraph.hasTask(":artifactoryPublish")
     }
@@ -185,7 +185,7 @@ signing {
 
 tasks.withType(Sign) {
     onlyIf {
-        def branch = System.getenv()["CIRRUS_BRANCH"]
+        def branch = System.getenv()["GITHUB_REF_NAME"]
         return !artifactoryPublish.skip &&
                 (branch == 'master' || branch ==~ 'branch-[\\d.]+') &&
                 gradle.taskGraph.hasTask(":artifactoryPublish")

.github/workflows/promote.yml

@@ -2,3 +2,9 @@ group=org.sonarsource.git.blame
 version=2.1-SNAPSHOT
 description=A git command implemented with JGit that blames multiple files simultaneously
 projectTitle=git-files-blame
+
+# Gradle daemon configuration
+org.gradle.daemon=false
+
+# JVM arguments for Gradle
+org.gradle.jvmargs=-XX:+PrintFlagsFinal -XshowSettings:vm -XX:+HeapDumpOnOutOfMemoryError -XX:+UnlockExperimentalVMOptions -Djava.security.egd=file:/dev/./urandom -Dfile.encoding=UTF8 -Duser.language=en -Duser.country=US