name: jpa-r2-evidence

on:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  TESTCONTAINERS_REUSE_ENABLE: "false"

jobs:
  jpa-r2-evidence:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    env:
      JPA_EVIDENCE_PROFILE: r2
      JPA_EVIDENCE_CI_JOB: >-
        actions:${{ github.workflow }}:${{ github.run_id }}:${{ github.job }}
      JPA_EVIDENCE_ARTIFACT_LOCATION: >-
        ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
      JPA_EVIDENCE_TOPOLOGY: postgresql-16-testcontainers-tls-and-fault-matrix
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
      - uses: ./.github/actions/setup-gradle-java
      - name: Verify the production-profile JPA R2 manifest DAG
        working-directory: src
        run: >-
          ./gradlew
          :adapter:outbound:persistence-jpa:verifyJpaPrimaryFoundationEvidence
          -PjpaEvidenceProfile=r2

          --stacktrace
      - name: Retain JPA R2 attempt manifests
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # actions/upload-artifact@v7.0.1
        with:
          name: jpa-r2-evidence-${{ github.sha }}-${{ github.run_id }}
          path: src/adapter/outbound/persistence-jpa/build/jpa-evidence/manifests
          if-no-files-found: error
          retention-days: 30