From 750cb6c6e5f1b98adc4c7820dc96a887a1334334 Mon Sep 17 00:00:00 2001
From: Leroy Truong <leroytruong@cupofcode.io>
Date: Mon, 2 Sep 2024 12:44:48 +0200
Subject: [PATCH 1/3] #23 ci(github): add Gradle CI workflow

---
 .github/workflows/gradle-ci.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .github/workflows/gradle-ci.yml

diff --git a/.github/workflows/gradle-ci.yml b/.github/workflows/gradle-ci.yml
new file mode 100644
index 000000000..83fffc20f
--- /dev/null
+++ b/.github/workflows/gradle-ci.yml
@@ -0,0 +1,26 @@
+name: Gradle CI
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+    - name: Set up JDK 21
+      uses: actions/setup-java@v4
+      with:
+        java-version: '21'
+        distribution: 'temurin'
+
+    - name: Setup Gradle
+      uses: gradle/actions/setup-gradle@v4
+
+    - name: Build with Gradle
+      run: ./gradlew build

From 53da603145f876e9200154eb615d065433b9b86a Mon Sep 17 00:00:00 2001
From: Leroy Truong <leroytruong@cupofcode.io>
Date: Mon, 2 Sep 2024 14:59:18 +0200
Subject: [PATCH 2/3] #23 build(gradle): temporarily disable Spotbugs and OWASP
 plugins

Spotbugs contain 92 issues and OWASP is missing an API key which causes the task to take a very long time.
---
 build.gradle.kts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/build.gradle.kts b/build.gradle.kts
index a86edf1eb..8ce9d418c 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -3,11 +3,11 @@ import org.springframework.boot.gradle.tasks.bundling.BootBuildImage
 
 plugins {
     application
-    id("com.github.spotbugs") version "6.0.21"
+//    id("com.github.spotbugs") version "6.0.21"
     id("io.freefair.lombok") version "8.10"
     id("org.jooq.jooq-codegen-gradle") version "3.19.11"
     id("org.openapi.generator") version "7.8.0"
-    id("org.owasp.dependencycheck") version "10.0.3"
+//    id("org.owasp.dependencycheck") version "10.0.3"
     id("org.springframework.boot") version "3.3.3"
 }
 

From 853d8cd48e697c74a094899fbc02bce18c8e4620 Mon Sep 17 00:00:00 2001
From: Leroy Truong <leroytruong@cupofcode.io>
Date: Mon, 2 Sep 2024 15:07:29 +0200
Subject: [PATCH 3/3] #23 ci(github): generate and submit dependency graph

---
 .github/workflows/gradle-ci.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/gradle-ci.yml b/.github/workflows/gradle-ci.yml
index 83fffc20f..9de262295 100644
--- a/.github/workflows/gradle-ci.yml
+++ b/.github/workflows/gradle-ci.yml
@@ -22,5 +22,9 @@ jobs:
     - name: Setup Gradle
       uses: gradle/actions/setup-gradle@v4
 
+    - name: Generate and submit dependency graph
+      uses: gradle/actions/dependency-submission@v4
+      if: github.ref == 'refs/heads/main'
+
     - name: Build with Gradle
       run: ./gradlew build