chore: Improve CI workflow

Author: hypery2k

.github/workflows/build.yml

@@ -1,69 +1,83 @@
 name: Build
 
 on:
-  push:
-    branches:
-      - main
-      - develop
-  pull_request:
-  merge_group:
+    push:
+        branches:
+            - main
+            - develop
+    pull_request:
+    merge_group:
 
 permissions:
-  id-token: write # This is required for requesting the JWT
-  security-events: write
-  contents: read
-  actions: read # This is required for actions/checkout
-  issues: write
-  pull-requests: write
-  checks: write # needed for spotbugs
+    # This is required for requesting the JWT
+    id-token: write
+    security-events: write
+    contents: read
+    # This is required for actions/checkout
+    actions: read
+    issues: write
+    pull-requests: write
+    checks: write # needed for spotbugs
+
+    # For reporting
+    attestations: write
+    checks: write
+    # For Junit Reporting commenting
+    pull-requests: write
 
 jobs:
-  build:
-    strategy:
-      matrix:
-        os: [ubuntu-latest, windows-latest]
-        java: [11, 17]
-      fail-fast: false
+    build:
+        strategy:
+            matrix:
+                os: [ ubuntu-latest, windows-latest ]
+                java: [ 11, 17 ]
+            fail-fast: false
+
+        runs-on: ${{ matrix.os }}
 
-    runs-on: ${{ matrix.os }}
+        steps:
+            -   name: Checkout
+                uses: actions/checkout@v3
 
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
+            -   name: Set up cache for ~./m2/repository
+                uses: actions/cache@v3
+                with:
+                    path: ~/.m2/repository
+                    key: maven-${{ matrix.os }}-java${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}-${{ hashFiles('.mvn/wrapper/maven-wrapper.properties') }}
+                    restore-keys: |
+                        maven-${{ matrix.os }}-java${{ matrix.java }}-
+                        maven-${{ matrix.os }}-
 
-      - name: Set up cache for ~./m2/repository
-        uses: actions/cache@v3
-        with:
-          path: ~/.m2/repository
-          key: maven-${{ matrix.os }}-java${{ matrix.java }}-${{ hashFiles('**/pom.xml') }}-${{ hashFiles('.mvn/wrapper/maven-wrapper.properties') }}
-          restore-keys: |
-            maven-${{ matrix.os }}-java${{ matrix.java }}-
-            maven-${{ matrix.os }}-
+            -   name: Set up JDK
+                uses: actions/setup-java@v3
+                with:
+                    java-version: ${{ matrix.java }}
+                    distribution: "adopt"
 
-      - name: Set up JDK
-        uses: actions/setup-java@v3
-        with:
-          java-version: ${{ matrix.java }}
-          distribution: "adopt"
+            -   name: Build with Maven
+                run: ./mvnw --batch-mode clean install
 
-      - name: Build with Maven
-        run: ./mvnw --batch-mode clean install
+            -   name: Publish Test Report
+                uses: mikepenz/action-junit-report@v5
+                if: success() || failure() # always run even if the previous step fails
+                with:
+                    report_paths: '**/target/*/TEST-*.xml'
 
-      - name: Run PMD checks
-        run: ./mvnw pmd:check
+            -   name: Run PMD checks
+                run: ./mvnw pmd:check
 
-  build-results:
-    name: Build results
-    if: ${{ always() }}
-    runs-on: ubuntu-latest
-    needs:
-      - build
-    steps:
-      - run: exit 1
-        # see https://stackoverflow.com/a/67532120/4907315
-        if: >-
-          ${{
-                contains(needs.*.result, 'failure')
-            || contains(needs.*.result, 'cancelled')
-                || contains(needs.*.result, 'skipped')
-                }}
+    build-results:
+        name: Build results
+        if: ${{ always() }}
+        runs-on: ubuntu-latest
+        needs:
+            - build
+        steps:
+            -   run: exit 1
+                # see https://stackoverflow.com/a/67532120/4907315
+                if: >-
+                    ${{
+                          contains(needs.*.result, 'failure')
+                      || contains(needs.*.result, 'cancelled')
+                          || contains(needs.*.result, 'skipped')
+                          }}

.github/workflows/release.yml

@@ -32,11 +32,11 @@ jobs:
                     git config --global user.email "${GITHUB_ACTOR_ID}+${GITHUB_ACTOR}@users.noreply.github.com"
                     git config --global user.name "$(gh api /users/${GITHUB_ACTOR} | jq .name -r)"
 
-            -   name: Set up JDK 11
+            -   name: Set up JDK 17
                 uses: actions/setup-java@v3
                 with:
                     distribution: 'adopt'
-                    java-version: 11
+                    java-version: 17
                     cache: 'maven'
 
             -   name: Setup settings.xml
@@ -50,7 +50,6 @@ jobs:
                             "password": "${{ secrets.OSS_JENKINS_PASS }}"
                         }]
 
-
             -   name: Create release
                 id: create-release
                 env:
@@ -93,8 +92,6 @@ jobs:
                 env:
                     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-
-
             -   name: Create Pull Request
                 id: create-pr
                 uses: peter-evans/create-pull-request@v7