verify.yml

# SPDX-FileCopyrightText: The devcontainer.java Authors
# SPDX-License-Identifier: 0BSD

name: Verify Commits
on:
  pull_request:
    branches: [ main ]
jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - id: checkout
        name: Clone Git Repository
        uses: actions/checkout@v6
      - id: graal
        name: Set up GraalVM
        uses: graalvm/setup-graalvm@v1
        with:
          version: latest
          java-version: 25
          github-token: ${{ secrets.GITHUB_TOKEN }}
      - id: cache
        name: Cache Maven Repository
        uses: actions/cache@v5
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
          restore-keys: |
            ${{ runner.os }}-maven-
      # The native profile runs PMD + SpotBugs (bound to verify) and builds and runs the
      # native-image smoke check, so a green run proves both code quality and native compatibility.
      - id: verify
        name: Verify Project
        run: mvn --batch-mode --activate-profiles=native verify