ci: migrate checking by SpotBugs from TravisCI to GitHub Actions

Part of #1154

Author: php-coder

.github/workflows/static-analysis.yml

@@ -185,3 +185,28 @@ jobs:
             compile
       - name: Run CodeNarc
         run: ./src/main/scripts/execute-command.sh codenarc
+  run-spotbugs:
+    name: Run SpotBugs
+    # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idruns-on
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Clone source code
+        uses: actions/[email protected] # https://github.com/actions/checkout
+        with:
+          # Whether to configure the token or SSH key with the local git config. Default: true
+          persist-credentials: false
+      - name: Install JDK
+        uses: actions/[email protected] # https://github.com/actions/setup-java
+        with:
+          distribution: 'adopt' # https://github.com/actions/setup-java#supported-distributions
+          java-version: '8'     # https://github.com/actions/setup-java#supported-version-syntax
+          cache: 'maven'        # https://github.com/actions/setup-java#caching-packages-dependencies
+      - name: Compile sources
+        run: >-
+          mvn \
+            --batch-mode \
+            -Denforcer.skip=true \
+            -DskipMinify \
+            compile
+      - name: Run SpotBugs
+        run: ./src/main/scripts/execute-command.sh spotbugs

src/main/scripts/ci/check-build-and-verify.sh

@@ -58,7 +58,6 @@ if [ "${1:-}" = '--only-integration-tests' ]; then
 	RUN_ONLY_INTEGRATION_TESTS=yes
 fi
 
-SPOTBUGS_STATUS=
 VERIFY_STATUS=
 ANSIBLE_LINT_STATUS=
 
@@ -67,7 +66,6 @@ if [ "${SPRING_PROFILES_ACTIVE:-}" = 'travis' ] && [ "${TRAVIS_PULL_REQUEST:-fal
 	DANGER_STATUS=
 fi
 
-SPOTBUGS_TIME=0
 VERIFY_TIME=0
 ANSIBLE_LINT_TIME=0
 DANGER_TIME=0
@@ -90,18 +88,9 @@ if [ "$RUN_ONLY_INTEGRATION_TESTS" = 'no' ]; then
 		MODIFIED_FILES="$(git --no-pager diff --name-only "$TRAVIS_COMMIT_RANGE" -- 2>/dev/null || :)"
 
 		if [ -n "$MODIFIED_FILES" ]; then
-			AFFECTS_POM_XML="$(echo "$MODIFIED_FILES"      | grep -Fxq 'pom.xml' || echo 'no')"
 			AFFECTS_TRAVIS_CFG="$(echo "$MODIFIED_FILES"   | grep -Fxq '.travis.yml' || echo 'no')"
-			AFFECTS_SPOTBUGS_CFG="$(echo "$MODIFIED_FILES"  |  grep -q 'spotbugs-filter\.xml$' || echo 'no')"
-			AFFECTS_JAVA_FILES="$(echo "$MODIFIED_FILES"    |  grep -q '\.java$' || echo 'no')"
 			AFFECTS_PLAYBOOKS="$(echo "$MODIFIED_FILES"      |  grep -Eq '(vagrant|prod|deploy|bootstrap|/roles/.+)\.yml$' || echo 'no')"
 
-			if [ "$AFFECTS_POM_XML" = 'no' ]; then
-				if [ "$AFFECTS_JAVA_FILES" = 'no' ]; then
-					[ "$AFFECTS_SPOTBUGS_CFG" != 'no' ] || SPOTBUGS_STATUS=skip
-				fi
-			fi
-			
 			if [ "$AFFECTS_TRAVIS_CFG" = 'no' ]; then
 				if [ "$AFFECTS_PLAYBOOKS" = 'no' ]; then
 					ANSIBLE_LINT_STATUS=skip
@@ -120,14 +109,6 @@ if [ "$RUN_ONLY_INTEGRATION_TESTS" = 'no' ]; then
 
 	echo
 
-	if [ "$SPOTBUGS_STATUS" != 'skip' ]; then
-		START_TIME=$SECONDS
-		# run after tests for getting compiled sources
-		"$EXEC_CMD" spotbugs >spotbugs.log 2>&1 || SPOTBUGS_STATUS=fail
-		SPOTBUGS_TIME=$((SECONDS - START_TIME))
-	fi
-	print_status "$SPOTBUGS_STATUS" "$SPOTBUGS_TIME" 'Run SpotBugs'
-
 	if [ "$ANSIBLE_LINT_STATUS" != 'skip' ]; then
 		START_TIME=$SECONDS
 		"$EXEC_CMD" ansible-lint >ansible_lint.log 2>&1 || ANSIBLE_LINT_STATUS=fail
@@ -151,7 +132,6 @@ fi
 print_status "$DANGER_STATUS" "$DANGER_TIME" 'Run danger'
 
 if [ "$RUN_ONLY_INTEGRATION_TESTS" = 'no' ]; then
-	[ "$SPOTBUGS_STATUS" = 'skip' ]       || print_log spotbugs.log       'Run SpotBugs'
 	[ "$ANSIBLE_LINT_STATUS" = 'skip' ]   || print_log ansible_lint.log   'Run Ansible Lint'
 fi
 
@@ -161,8 +141,8 @@ if [ "$DANGER_STATUS" != 'skip' ]; then
 	print_log danger.log 'Run danger'
 fi
 
-rm -f spotbugs.log verify.log danger.log ansible_lint.log
+rm -f verify.log danger.log ansible_lint.log
 
-if echo "$SPOTBUGS_STATUS$VERIFY_STATUS$DANGER_STATUS$ANSIBLE_LINT_STATUS" | grep -Fqs 'fail'; then
+if echo "$VERIFY_STATUS$DANGER_STATUS$ANSIBLE_LINT_STATUS" | grep -Fqs 'fail'; then
 	exit 1
 fi