add wiz scan on create PR to master (SWG-14342)

Author: ewaostrowska

.github/workflows/maven-pr-3.0.yml

@@ -6,16 +6,20 @@ on:
 
 jobs:
   build_pr_30:
-
     runs-on: ubuntu-latest
     strategy:
       matrix:
         java: [ 11, 17 ]
 
+    # export docker_tag from this job
+    outputs:
+      docker_tag: ${{ steps.build_image.outputs.tag }}
+
     env:
       GENERATORS_VERSION_PROPERTY: ""
       MAVEN_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
       MAVEN_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+
     steps:
       - uses: actions/checkout@v4
         name: git checkout 3.0.0
@@ -33,62 +37,77 @@ jobs:
       - name: Add Central-Portal snapshot repo to settings.xml
         uses: s4u/[email protected]
         with:
-          repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
-          servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
+          repositories: |
+            [
+              {
+                "id": "central-portal-snapshots",
+                "name": "Sonatype Central Portal snapshots",
+                "url": "https://central.sonatype.com/repository/maven-snapshots/",
+                "releases": { "enabled": false },
+                "snapshots": { "enabled": true }
+              }
+            ]
+          servers: |
+            [
+              {
+                "id": "central",
+                "username": "${{ secrets.MAVEN_CENTRAL_USERNAME }}",
+                "password": "${{ secrets.MAVEN_CENTRAL_PASSWORD }}"
+              }
+            ]
 
       - name: preliminary checks
         run: |
           docker login --username=${{ secrets.DOCKERHUB_SB_USERNAME }} --password=${{ secrets.DOCKERHUB_SB_PASSWORD }}
           set -e
-          # fail if templates/generators contain carriage return '\r'
           /bin/bash ./bin/utils/detect_carriage_return.sh
-          # fail if generators contain merge conflicts
           /bin/bash ./bin/utils/detect_merge_conflict.sh
-          # fail if generators contain tab '\t'
           /bin/bash ./bin/utils/detect_tab_in_java_class.sh
 
       - name: Build with Maven
         if: ${{ matrix.java != 8 }}
         run: |
-          export MY_POM_VERSION=`mvn -Dswagger-codegen-generators-version=1.0.37 -q -Dexec.executable="echo" -Dexec.args='${projects.version}' --non-recursive org.codehaus.mojo:exec-maven-plugin:1.3.1:exec`
-          echo "POM VERSION" ${MY_POM_VERSION}
-          export GENERATORS_VERSION=`sed -n 's/<swagger\-codegen\-generators\-version>\([^\s]*\)<\/swagger\-codegen\-generators\-version>/\1/p' pom.xml`
-          export GENERATORS_VERSION=`echo ${GENERATORS_VERSION} | tr -d '[:space:]'`          
-          echo "GENERATORS_VERSION" ${GENERATORS_VERSION}
+          export MY_POM_VERSION=$(mvn -Dswagger-codegen-generators-version=1.0.37 \
+            -q -Dexec.executable="echo" -Dexec.args='${projects.version}' \
+            --non-recursive org.codehaus.mojo:exec-maven-plugin:1.3.1:exec)
+          echo "POM VERSION ${MY_POM_VERSION}"
+          
+          export GENERATORS_VERSION=$(sed -n 's/<swagger\-codegen\-generators\-version>\([^<]*\)<\/swagger\-codegen\-generators\-version>/\1/p' pom.xml | tr -d '[:space:]')
+          echo "GENERATORS_VERSION ${GENERATORS_VERSION}"
+          
           export GENERATORS_VERSION_PROPERTY=""
-          if [[ ! $MY_POM_VERSION =~ ^.*SNAPSHOT$ ]];
-          then
-            if [[ ! $GENERATORS_VERSION =~ ^.*SNAPSHOT$ ]];
-            then
-              # check release version exists
-              export GENERATORS_FOUND_JSON=`curl -s --max-time 60 --retry 15 --connect-timeout 20 https://search.maven.org/solrsearch/select?q=g:io.swagger.codegen.v3%20AND%20a:swagger-codegen-generators%20AND%20v:${GENERATORS_VERSION}%20AND%20p:jar`
-              export GENERATORS_FOUND=`echo ${GENERATORS_FOUND_JSON} | jq '.response.numFound'`
-              echo "GENERATORS_FOUND" ${GENERATORS_FOUND}
-              if [[ $GENERATORS_FOUND == '0' ]];
-              then
-                echo "generators version not found"
-                rm -f maven-metadata.xml
+          if [[ ! $MY_POM_VERSION =~ SNAPSHOT ]]; then
+            if [[ ! $GENERATORS_VERSION =~ SNAPSHOT ]]; then
+              # check release version exists on Maven Central
+              local result
+              result=$(curl -s --max-time 60 --retry 15 \
+                "https://search.maven.org/solrsearch/select?q=g:io.swagger.codegen.v3%20AND%20a:swagger-codegen-generators%20AND%20v:${GENERATORS_VERSION}%20AND%20p:jar")
+              if [[ $(echo "$result" | jq '.response.numFound') -eq 0 ]]; then
+                # fall back to latest snapshot
                 SNAP_API="https://central.sonatype.com/repository/maven-snapshots"
                 ARTIFACT_PATH="io/swagger/codegen/v3/swagger-codegen-generators"
-                ROOT_META="${SNAP_API}/${ARTIFACT_PATH}/maven-metadata.xml"
-                export LAST_SNAP=$(curl -s "$ROOT_META" | grep -oP '(?<=<version>)1\.[^<]+' | sort -V | tail -n1)
-                echo "LAST_SNAP $LAST_SNAP"
-                export GENERATORS_VERSION_PROPERTY=-Dswagger-codegen-generators-version=$LAST_SNAP
+                LAST_SNAP=$(curl -s "$SNAP_API/$ARTIFACT_PATH/maven-metadata.xml" \
+                  | grep -oP '(?<=<version>)[^<]+' | sort -V | tail -1)
+                export GENERATORS_VERSION_PROPERTY="-Dswagger-codegen-generators-version=$LAST_SNAP"
               fi
             fi
           fi
-          echo "GENERATORS_VERSION_PROPERTY ${GENERATORS_VERSION_PROPERTY}"
+          
+          echo "GENERATORS_VERSION_PROPERTY=${GENERATORS_VERSION_PROPERTY}"
           echo "GENERATORS_VERSION_PROPERTY=${GENERATORS_VERSION_PROPERTY}" >> $GITHUB_ENV
-          mvn clean verify -U -DJETTY_TEST_HTTP_PORT=8070 -DJETTY_TEST_STOP_PORT=8069 ${GENERATORS_VERSION_PROPERTY}
+          
+          mvn clean verify -U -DJETTY_TEST_HTTP_PORT=8070 \
+            -DJETTY_TEST_STOP_PORT=8069 ${GENERATORS_VERSION_PROPERTY}
 
-      - name: Build Docker Image
+      - name: Build Docker image
+        id: build_image
         run: |
-          docker build -t swagger-codegen:latest .
-          docker tag swagger-codegen:latest swagger-codegen:${{ github.sha }}
-
-      - name: Set docker tag output
-        id: docker_tag
-        run: echo "tag=swagger-codegen:${{ github.sha }}" >> $GITHUB_OUTPUT
+          # construct a unique tag: repo:pr-<number>-java<version>
+          TAG="${{ github.repository }}:pr-${{ github.event.pull_request.number }}-java${{ matrix.java }}"
+          docker build -t "$TAG" .
+          # export as both step output and env for downstream
+          echo "::set-output name=tag::$TAG"
+          echo "IMAGE_TAG=$TAG" >> $GITHUB_ENV
 
   scan-with-wiz:
     name: Trigger Wiz Scanning