Repository navigation

feat: add spa support for CSRF by setting into cookie #1326

	# SPDX-FileCopyrightText: Estonian Information System Authority
	# SPDX-License-Identifier: MIT

	name: SonarCloud code analysis

	on:
	push:
	paths-ignore:
	- 'example/**'
	- '.github/workflows/example'
	pull_request:
	paths-ignore:
	- 'example/**'
	- '.github/workflows/example'
	schedule:
	- cron: '45 6 8-14,22-28 * 1'

	jobs:
	analyze:
	name: Analyze
	if: github.repository == 'web-eid/web-eid-authtoken-validation-java'
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	- name: Set up JDK 17
	uses: actions/setup-java@v4
	with:
	distribution: zulu
	java-version: 17
	- name: Cache SonarCloud packages
	uses: actions/cache@v4
	with:
	path: ~/.sonar/cache
	key: ${{ runner.os }}-sonar
	restore-keys: ${{ runner.os }}-sonar
	- name: Cache Maven packages
	uses: actions/cache@v4
	with:
	path: ~/.m2
	key: ${{ runner.os }}-m2-v11-${{ hashFiles('**/pom.xml') }}
	restore-keys: ${{ runner.os }}-m2-v17
	- name: Build and analyze
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar