deploy-jersey2-cassandra3.yml

# yamllint --format github .github/workflows/deploy.yml
---
name: deploy jersey2-cassandra3

on:
  # We deploy non-tagged pushes to master relevant for this project. We can't opt out of
  # documentation-only commits because GH actions does not permit paths and paths-ignore.
  push:
    tags: ''
    branches: master
    paths:
      - "build-bin/**"
      - "docker/**"
      - "jersey2-cassandra3/**"
      - ".github/workflows/deploy-jersey2-cassandra3.yaml"
      - "parent-pom.xml"

jobs:
  deploy:
    runs-on: ubuntu-24.04  # newest available distribution, aka noble
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4
      - name: Cache local Maven repository
        uses: actions/cache@v4
        with:
          path: ./m2repository  # Shared with the Docker build context via .dockerignore
          key: ${{ runner.os }}-jersey2-cassandra3-maven-${{ hashFiles('parent-pom.xml', 'jersey2-cassandra3/pom.xml') }}
          restore-keys: ${{ runner.os }}-jersey2-cassandra3-maven-
      # Don't attempt to cache Docker. Sensitive information can be stolen
      # via forks, and login session ends up in ~/.docker. This is ok because
      # we publish DOCKER_PARENT_IMAGE to ghcr.io, hence local to the runner.
      - name: Deploy jersey2-cassandra3
        env:
          # GH_USER=<user that created GH_TOKEN>
          GH_USER: ${{ secrets.GH_USER }}
          # GH_TOKEN=<hex token value>
          #   - pushes Docker images to ghcr.io
          #   - create via https://github.com/settings/tokens
          #   - needs repo:status, public_repo, write:packages, delete:packages
          GH_TOKEN: ${{ secrets.GH_TOKEN }}
        run: |
          build-bin/configure_deploy jersey2-cassandra3 &&
          build-bin/deploy jersey2-cassandra3