Split workflows [skip ci]

Author: testower

.github/workflows/build-external.yml

@@ -0,0 +1,28 @@
+name: Build pull request
+on:
+  pull_request:
+    branches:
+      - master
+jobs:
+  maven-verify:
+    if: github.event.pull_request.head.repo.fork == true
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-java@v5
+        with:
+          java-version: 17.0.13
+          distribution: liberica
+      - name: Cache Maven dependencies
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+            ${{ runner.os }}-maven-
+            ${{ runner.os }}-
+      - name: Run maven build
+        run: mvn install -PprettierCheck -Dprettier.nodePath=node -Dprettier.npmPath=npm

.github/workflows/build.yml

@@ -3,14 +3,21 @@ on:
   pull_request:
     branches:
       - master
+env:
+  JFROG_USER: ${{ secrets.ARTIFACTORY_AUTH_USER }}
+  JFROG_PASS: ${{ secrets.ARTIFACTORY_AUTH_TOKEN }}
+  NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
 jobs:
-  maven-verify:
-    if: github.event.pull_request.head.repo.fork == true
+  maven-package:
+    if: github.event.pull_request.head.repo.fork == false
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+      - name: Copy maven settings
+        run: |
+          wget https://raw.githubusercontent.com/entur/ror-maven-settings/master/.m2/settings.xml -O .github/workflows/settings.xml
       - uses: actions/setup-java@v5
         with:
           java-version: 17.0.13
@@ -24,5 +31,23 @@ jobs:
             ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
             ${{ runner.os }}-maven-
             ${{ runner.os }}-
+
       - name: Run maven build
-        run: mvn install -PprettierCheck -Dprettier.nodePath=node -Dprettier.npmPath=npm
+        run: mvn verify -s .github/workflows/settings.xml -PprettierCheck -Dprettier.nodePath=node -Dprettier.npmPath=npm
+      - name: Sonar Scan
+        env:
+          SONAR_TOKEN: ${{ secrets.ENTUR_SONAR_PASSWORD }}
+          SONAR_PROJECT_NAME: ${{ github.event.repository.name }}
+          SONAR_PROJECT_KEY: entur_${{ github.event.repository.name }}
+        run: |
+          mvn -Psonar -s .github/workflows/settings.xml \
+                  sonar:sonar \
+                  -Dsonar.projectKey=${SONAR_PROJECT_KEY} \
+                  -Dsonar.organization=enturas-github \
+                  -Dsonar.projectName=${SONAR_PROJECT_NAME} \
+                  -Dsonar.host.url=https://sonarcloud.io \
+                  -Dsonar.token=${SONAR_TOKEN}
+      - name: Upload artifact
+        uses: actions/[email protected]
+        with:
+          path: gbfs-validator-java/target/*.jar

.github/workflows/deploy.yml

@@ -1,11 +1,13 @@
 name: Build and Deploy Maven Central
+
+concurrency:
+  group: deploy-master
+  cancel-in-progress: false
+
 on:
   push:
     branches:
       - master
-  pull_request:
-    branches:
-      - master
 env:
     JFROG_USER: ${{ secrets.ARTIFACTORY_AUTH_USER }}
     JFROG_PASS: ${{ secrets.ARTIFACTORY_AUTH_TOKEN }}
@@ -16,7 +18,7 @@ env:
     NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
 jobs:
   maven-package:
-    if: github.event.pull_request.head.repo.fork == false && !contains(github.event.head_commit.message, 'ci skip')
+    if: github.event_name == 'push' && !contains(github.event.head_commit.message, 'ci skip')
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5