Configure Mend Bolt for GitHub

.github/scripts/maven_publish_release.sh

@@ -5,5 +5,5 @@ set -eu -o pipefail
 POM_VERSION=$(mvn org.apache.maven.plugins:maven-help-plugin:evaluate -Dexpression=project.version -q -DforceStdout)
 PUBLISH_VERSION="${POM_VERSION%%-*}"
 
-mvn --batch-mode versions:set -DnewVersion="${PUBLISH_VERSION}"
-mvn --batch-mode -DskipTests deploy
+mvn --batch-mode --no-transfer-progress versions:set -DnewVersion="${PUBLISH_VERSION}"
+mvn --batch-mode --no-transfer-progress --activate-profiles release -DskipTests deploy

.github/scripts/maven_publish_snapshot.sh

@@ -6,5 +6,5 @@ POM_VERSION=$(mvn org.apache.maven.plugins:maven-help-plugin:evaluate -Dexpressi
 GATEWAY_VERSION="${POM_VERSION%%-*}"
 PUBLISH_VERSION="${GATEWAY_VERSION}-SNAPSHOT"
 
-mvn --batch-mode versions:set -DnewVersion="${PUBLISH_VERSION}"
-mvn --batch-mode -DskipTests deploy
+mvn --batch-mode --no-transfer-progress versions:set -DnewVersion="${PUBLISH_VERSION}"
+mvn --batch-mode --no-transfer-progress --activate-profiles release -DskipTests deploy

.github/workflows/build-docs.yml

@@ -28,6 +28,7 @@ jobs:
         with:
           java-version: 17
           distribution: temurin
+          cache: maven
       - name: Generate JavaDoc
         run: make generate-docs-java
       - name: Upload JavaDoc

.github/workflows/push.yml

@@ -14,29 +14,37 @@ jobs:
     name: Publish API documentation
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout source
+        uses: actions/checkout@v3
+        with:
+          path: source
+      - name: Checkout publish
+        uses: actions/checkout@v3
         with:
           ref: gh-pages
+          path: publish
           token: ${{ secrets.REPO_ACCESS_TOKEN }}
       - name: Remove old API documentation
         shell: bash
-        run: rm -rf "${GITHUB_REF_NAME}/api"
+        run: rm -rf "${GITHUB_REF_NAME}/api"  
+        working-directory: publish
       - name: Download JavaDoc
         uses: actions/download-artifact@v3
         with:
           name: java-doc
-          path: ${{ github.ref_name }}/api/java
+          path: publish/${{ github.ref_name }}/api/java
       - name: Download Node documentation
         uses: actions/download-artifact@v3
         with:
           name: node-doc
-          path: ${{ github.ref_name }}/api/node
+          path: publish/${{ github.ref_name }}/api/node
       - name: Publish
+        working-directory: publish
         env:
           USER_NAME: 'Hyperledger Bot'
           USER_EMAIL: '[email protected]'
           COMMIT_REF: ${{ github.sha }}
-        run: ./.github/scripts/git_push_changes.sh
+        run: ${{ github.workspace }}/source/.github/scripts/git_push_changes.sh
 
   publish-node:
     needs: build
@@ -69,6 +77,7 @@ jobs:
         with:
           java-version: 8
           distribution: temurin
+          cache: maven
           gpg-private-key: ${{ secrets.OSSRH_GPG_SECRET_KEY }}
           gpg-passphrase: MAVEN_GPG_PASSPHRASE
       - name: Publish

.github/workflows/release.yml

@@ -37,6 +37,7 @@ jobs:
         with:
           java-version: 8
           distribution: temurin
+          cache: maven
           server-id: ossrh
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD

.github/workflows/test.yml

@@ -10,94 +10,102 @@ jobs:
   verify-versions:
     uses: ./.github/workflows/verify-versions.yml
 
+  shellcheck:
+    runs-on: ubuntu-latest
+    name: ShellCheck
+    steps:
+      - uses: actions/checkout@v3
+      - run: make shellcheck
+
   docs:
     needs: verify-versions
     uses: ./.github/workflows/build-docs.yml
 
-  go:
-    needs: verify-versions
-    runs-on: ubuntu-22.04
-    name: Test Go
-    strategy:
-      fail-fast: false
-      matrix:
-        go-version:
-          - 1.17
-          - 1.18
-          - 1.19
-    env:
-      SOFTHSM2_CONF: ${{ github.workspace }}/softhsm2.conf
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v3
-        with:
-          go-version: ${{ matrix.go-version }}
-      - name: Install SoftHSM
-        run: ./.github/scripts/install_softhsm.sh
-        env:
-          TMPDIR: ${{ runner.temp }}
-      - name: Generate mocks
-        run: make generate
-      - name: Run unit tests
-        run: make unit-test-go-pkcs11
-      - name: Pull Fabric Docker images
-        run: make pull-latest-peer
-      - name: Run scenario tests
-        run: make scenario-test-go
+  # go:
+  #   needs: verify-versions
+  #   runs-on: ubuntu-22.04
+  #   name: Test Go
+  #   strategy:
+  #     fail-fast: false
+  #     matrix:
+  #       go-version:
+  #         - 1.17
+  #         - 1.18
+  #         - 1.19
+  #   env:
+  #     SOFTHSM2_CONF: ${{ github.workspace }}/softhsm2.conf
+  #   steps:
+  #     - uses: actions/checkout@v3
+  #     - uses: actions/setup-go@v3
+  #       with:
+  #         go-version: ${{ matrix.go-version }}
+  #     - name: Install SoftHSM
+  #       run: ./.github/scripts/install_softhsm.sh
+  #       env:
+  #         TMPDIR: ${{ runner.temp }}
+  #     - name: Generate mocks
+  #       run: make generate
+  #     - name: Run unit tests
+  #       run: make unit-test-go-pkcs11
+  #     - name: Pull Fabric Docker images
+  #       run: make pull-latest-peer
+  #     - name: Run scenario tests
+  #       run: make scenario-test-go
 
-  node:
-    needs: verify-versions
-    runs-on: ubuntu-22.04
-    name: Test Node
-    strategy:
-      fail-fast: false
-      matrix:
-        node-version:
-          - 14
-          - 16
-          - 18
-    env:
-      SOFTHSM2_CONF: ${{ github.workspace }}/softhsm2.conf
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          node-version: ${{ matrix.node-version }}
-      - uses: actions/setup-go@v3
-        with:
-          go-version: ${{ env.DEFAULT_GO_VERSION }}
-      - name: Run unit tests
-        run: make unit-test-node
-      - name: Install SoftHSM
-        run: ./.github/scripts/install_softhsm.sh
-        env:
-          TMPDIR: ${{ runner.temp }}
-      - name: Pull Fabric Docker images
-        run: make pull-latest-peer
-      - name: Run scenario tests
-        run: make scenario-test-node
+  # node:
+  #   needs: verify-versions
+  #   runs-on: ubuntu-22.04
+  #   name: Test Node
+  #   strategy:
+  #     fail-fast: false
+  #     matrix:
+  #       node-version:
+  #         - 14
+  #         - 16
+  #         - 18
+  #   env:
+  #     SOFTHSM2_CONF: ${{ github.workspace }}/softhsm2.conf
+  #   steps:
+  #     - uses: actions/checkout@v3
+  #     - uses: actions/setup-node@v3
+  #       with:
+  #         node-version: ${{ matrix.node-version }}
+  #     - uses: actions/setup-go@v3
+  #       with:
+  #         go-version: ${{ env.DEFAULT_GO_VERSION }}
+  #     - name: Run unit tests
+  #       run: make unit-test-node
+  #     - name: Install SoftHSM
+  #       run: ./.github/scripts/install_softhsm.sh
+  #       env:
+  #         TMPDIR: ${{ runner.temp }}
+  #     - name: Pull Fabric Docker images
+  #       run: make pull-latest-peer
+  #     - name: Run scenario tests
+  #       run: make scenario-test-node
 
-  java:
-    needs: verify-versions
-    runs-on: ubuntu-22.04
-    name: Test Java
-    strategy:
-      fail-fast: false
-      matrix:
-        java-version:
-          - 8
-          - 11
-          - 17
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          java-version: ${{ matrix.java-version }}
-          distribution: temurin
-      - uses: actions/setup-go@v3
-        with:
-          go-version: ${{ env.DEFAULT_GO_VERSION }}
-      - name: Pull Fabric Docker images
-        run: make pull-latest-peer
-      - name: Run unit and scenario tests
-        run: make scenario-test-java
+  # java:
+  #   needs: verify-versions
+  #   runs-on: ubuntu-22.04
+  #   name: Test Java
+  #   strategy:
+  #     fail-fast: false
+  #     matrix:
+  #       java-version:
+  #         - 8
+  #         - 11
+  #         - 17
+  #   steps:
+  #     - uses: actions/checkout@v3
+  #     - uses: actions/setup-java@v3
+  #       with:
+  #         java-version: ${{ matrix.java-version }}
+  #         distribution: temurin
+  #         cache: maven
+  #     - uses: actions/setup-go@v3
+  #       with:
+  #         go-version: ${{ env.DEFAULT_GO_VERSION }}
+  #     - name: Pull Fabric Docker images
+  #       run: make pull-latest-peer
+  #     - name: Run unit and scenario tests
+  #       run: make scenario-test-java

.github/workflows/verify-versions.yml

@@ -48,6 +48,7 @@ jobs:
         with:
           java-version: 17
           distribution: temurin
+          cache: maven
       - name: Check Java artifact version
         shell: bash
         working-directory: java

.whitesource

@@ -0,0 +1,14 @@
+{
+  "scanSettings": {
+    "baseBranches": []
+  },
+  "checkRunSettings": {
+    "vulnerableCheckRunConclusionLevel": "failure",
+    "displayMode": "diff",
+    "useMendCheckNames": true
+  },
+  "issueSettings": {
+    "minSeverityLevel": "LOW",
+    "issueType": "DEPENDENCY"
+  }
+}

Makefile

@@ -4,7 +4,7 @@
 # SPDX-License-Identifier: Apache-2.0
 #
 
-base_dir := $(PWD)
+base_dir := $(patsubst %/,%,$(dir $(realpath $(lastword $(MAKEFILE_LIST)))))
 
 go_dir := $(base_dir)/pkg
 node_dir := $(base_dir)/node
@@ -220,3 +220,7 @@ clean-java:
 .PHONEY: clean-generated
 clean-generated:
 	find "$(go_dir)" -name '*_mock_test.go' -delete
+
+.PHONEY: shellcheck
+shellcheck:
+	cd "$(base_dir)" && ./scripts/shellcheck.sh