JACOCO-55 Migrate Cirrus build to Github actions (#130)

Author: tomasz-tylenda-sonarsource

.github/workflows/build.yml

@@ -0,0 +1,56 @@
+name: Build
+on:
+  push:
+    branches:
+      - master
+      - branch-*
+      - dogfood-*
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: "30 1 * * *"  # Run daily at 01:30 AM UTC
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: github-ubuntu-latest-s
+    name: Build
+    permissions:
+      id-token: write  # Required for Vault OIDC authentication
+      contents: write  # Required for repository access and tagging
+    outputs:
+      build-number: ${{ steps.build-gradle.outputs.BUILD_NUMBER }}
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+        with:
+          version: 2025.7.12
+      - uses: SonarSource/ci-github-actions/build-gradle@v1
+        id: build-gradle
+        with:
+          deploy-pull-request: true
+          artifactory-reader-role: private-reader
+          artifactory-deployer-role: qa-deployer
+
+  # QA is broken due to JACOCO-56
+
+  promote:
+    needs:
+      - build
+    runs-on: github-ubuntu-latest-s
+    name: Promote
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
+        with:
+          cache_save: false
+          version: 2025.7.12
+      - uses: SonarSource/ci-github-actions/promote@v1
+        with:
+          promote-pull-request: true

.github/workflows/pr-cleanup.yml

@@ -0,0 +1,12 @@
+name: Cleanup PR Resources
+on:
+  pull_request:
+    types: [closed]
+
+jobs:
+  cleanup:
+    runs-on: github-ubuntu-latest-s
+    permissions:
+      actions: write
+    steps:
+      - uses: SonarSource/ci-github-actions/pr_cleanup@v1

README.md

@@ -1,6 +1,6 @@
 # SonarQube JaCoCo Plugin
 
-[![Build Status](https://api.cirrus-ci.com/github/SonarSource/sonar-jacoco.svg?branch=master)](https://cirrus-ci.com/github/SonarSource/sonar-jacoco)
+[![Build](https://github.com/SonarSource/sonar-jacoco/actions/workflows/build.yml/badge.svg?branch=master)](https://github.com/SonarSource/sonar-jacoco/actions/workflows/build.yml)
 [![Quality gate](https://next.sonarqube.com/sonarqube/api/project_badges/measure?project=org.sonarsource.jacoco%3Asonar-jacoco&metric=alert_status)](https://next.sonarqube.com/sonarqube/dashboard?id=org.sonarsource.jacoco%3Asonar-jacoco)
 [![Coverage](https://next.sonarqube.com/sonarqube/api/project_badges/measure?project=org.sonarsource.jacoco%3Asonar-jacoco&metric=coverage)](https://next.sonarqube.com/sonarqube/component_measures?id=org.sonarsource.jacoco%3Asonar-jacoco&metric=coverage) 
 

build.gradle

@@ -176,7 +176,7 @@ signing {
   def signingPassword = findProperty("signingPassword")
   useInMemoryPgpKeys(signingKeyId, signingKey, signingPassword)
   required {
-    def branch = System.getenv()["CIRRUS_BRANCH"]
+    def branch = System.getenv()["GITHUB_REF_NAME"] ?: System.getenv()["CIRRUS_BRANCH"]
     return (branch == 'master' || branch ==~ 'branch-[\\d.]+') &&
       gradle.taskGraph.hasTask(":artifactoryPublish")
   }

mise.toml

@@ -0,0 +1,3 @@
+[tools]
+java = "17.0"
+gradle = "7.6"