Add workflow

Author: making

.github/workflows/authorization.yaml

@@ -0,0 +1,35 @@
+name: Authorization
+on:
+  push:
+    branches:
+    - main
+    paths:
+    - authorization/src/**
+    - authorization/pom.xml
+    - .github/workflows/*
+  pull_request:
+    branches:
+    - main
+    paths:
+    - authorization/src/**
+    - authorization/pom.xml
+    - .github/workflows/*
+jobs:
+  unit-test:
+    uses: making/oauth2-sso-demo/.github/workflows/unit-test.yaml@main
+    with:
+      module: authorization
+  build-oci-image-jvm-amd64:
+    needs: unit-test
+    uses: making/oauth2-sso-demo/.github/workflows/build-oci-image-jvm.yaml@main
+    with:
+      module: authorization
+      image_name: authorization_jvm_amd64
+      image_file: authorization_jvm_amd64.yaml
+      runs_on: ubuntu-latest
+  save-image-jvm-amd64:
+    needs: build-oci-image-jvm-amd64
+    uses: making/workflows/.github/workflows/save-images.yaml@main
+    with:
+      image_name: authorization_jvm_amd64
+      image_file: authorization_jvm_amd64.yaml

.github/workflows/build-oci-image-jvm.yaml

@@ -0,0 +1,73 @@
+name: Build OCI Image (JVM)
+on:
+  workflow_call:
+    inputs:
+      module:
+        required: true
+        type: string
+      image_name:
+        required: false
+        type: string
+        default: image
+      image_file:
+        required: false
+        type: string
+        default: image.yaml
+      target_ref:
+        required: false
+        type: string
+        default: 'refs/heads/main'
+      runs_on:
+        required: false
+        type: string
+        default: ubuntu-latest
+jobs:
+  build:
+    runs-on: ${{ inputs.runs_on }}
+    permissions:
+      contents: read
+      packages: write
+    steps:
+    - uses: actions/checkout@v2
+    - uses: graalvm/setup-graalvm@v1
+      with:
+        java-version: '21'
+        distribution: graalvm
+        cache: 'maven'
+    - name: Set version
+      run: |
+        CURRENT_VERSION=$(./mvnw -f ${{ inputs.module }} help:evaluate -Dexpression=project.version -q -DforceStdout)
+        NEW_VERSION=$(echo $CURRENT_VERSION | sed "s/-SNAPSHOT/.${GITHUB_SHA}/")
+        ./mvnw -f ${{ inputs.module }} versions:set -DnewVersion=${NEW_VERSION} -DgenerateBackupPoms=false --no-transfer-progress
+    - name: build image (Paketo Buildpack)
+      run: |
+        OS_ARCH=$(./mvnw -f ${{ inputs.module }} help:evaluate -Dexpression=os.arch -q -DforceStdout)
+        ./mvnw -V -f ${{ inputs.module }} --no-transfer-progress spring-boot:build-image -DskipTests -Dspring-boot.build-image.imageName=ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}_${GITHUB_SHA}
+    - name: Login to GitHub Container Registry
+      if: github.ref == inputs.target_ref
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: docker push
+      if: github.ref == inputs.target_ref
+      run: |
+        OS_ARCH=$(./mvnw -f ${{ inputs.module }} help:evaluate -Dexpression=os.arch -q -DforceStdout)
+        docker push ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}_${GITHUB_SHA}
+        docker tag ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}_${GITHUB_SHA} ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}
+        docker push ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}
+    - name: Generate digest
+      if: github.ref == inputs.target_ref
+      run: |
+        OS_ARCH=$(./mvnw -f ${{ inputs.module }} help:evaluate -Dexpression=os.arch -q -DforceStdout)
+        cat <<EOF > ${{ inputs.image_file }}
+        image: $(docker inspect --format='{{index .RepoDigests 0}}' ghcr.io/${{ github.repository }}/${{ inputs.module }}:jvm_${OS_ARCH}_${GITHUB_SHA})
+        git_revision: ${GITHUB_SHA}
+        EOF
+    - name: Upload artifact
+      if: github.ref == inputs.target_ref
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ inputs.image_name }}
+        path: ${{ inputs.image_file }}

.github/workflows/unit-test.yaml

@@ -0,0 +1,22 @@
+name: Unit Test
+on:
+  workflow_call:
+    inputs:
+      module:
+        required: true
+        type: string
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+    - uses: actions/checkout@v2
+    - uses: graalvm/setup-graalvm@v1
+      with:
+        java-version: '21'
+        distribution: graalvm
+        cache: 'maven'
+    - name: unit test
+      run: ./mvnw -V -f ${{ inputs.module }} clean test --no-transfer-progress