name: jpa-r2-evidence

on:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  TESTCONTAINERS_REUSE_ENABLE: "false"

jobs:
  jpa-r2-evidence:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    env:
      JPA_EVIDENCE_PROFILE: r2
      JPA_EVIDENCE_CI_JOB: >-
        actions:${{ github.workflow }}:${{ github.run_id }}:${{ github.job }}
      JPA_EVIDENCE_ARTIFACT_LOCATION: >-
        ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
      JPA_EVIDENCE_TOPOLOGY: postgresql-16-testcontainers-tls-and-fault-matrix
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
      - name: Validate Gradle wrapper
        id: gradle-wrapper-validation
        uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # gradle/actions@v6
      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # actions/setup-java@v4.7.1
        with:
          distribution: temurin
          java-version: "21.0.11+10"
          cache: gradle
          cache-dependency-path: |
            src/**/*.gradle
            src/**/gradle-wrapper.properties
            src/**/gradle.lockfile
      - name: Verify the production-profile JPA R2 manifest DAG
        working-directory: src
        run: >-
          ./gradlew
          :adapter:outbound:persistence-jpa:verifyJpaPrimaryFoundationEvidence
          -PjpaEvidenceProfile=r2
          --no-daemon
          --stacktrace
      - name: Retain JPA R2 attempt manifests
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # actions/upload-artifact@v7.0.1
        with:
          name: jpa-r2-evidence-${{ github.sha }}-${{ github.run_id }}
          path: src/adapter/outbound/persistence-jpa/build/jpa-evidence/manifests
          if-no-files-found: error
          retention-days: 30