Qodana

.github/workflows/chatter.yml

@@ -0,0 +1,23 @@
+name: Chatter attribution
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, closed]
+  push:
+    branches:
+      - qodana
+
+permissions:
+  checks: write
+  contents: write
+  pull-requests: write
+
+jobs:
+  attribution:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: qodana/chatter-action@main

.github/workflows/qodana_code_quality.yml

@@ -1,20 +1,43 @@
 name: Qodana
+permissions: read-all
 on:
   workflow_dispatch:
   pull_request:
   push:
     branches:
       - develop
       - master
+      - qodana
+      - default
 
 jobs:
   qodana:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      checks: write
+    env:
+      GRADLE_OPTS: "-Dfile.encoding=UTF-8"
+
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
-          fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}  # to check out the actual pull request commit, not the merge commit
+          fetch-depth: 0  # a full history is required for pull request analysis
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+
       - name: 'Qodana Scan'
-        uses: JetBrains/qodana-action@v2022.3.4
+        uses: JetBrains/qodana-action@next
+        with:
+          upload-result: true
+          pr-mode: 'true'
+          env-vars-to-linter: "SUPER_ENV,NON_EXISTENT_VAR"
+        #        with:
+#          primary-cache-key: qodana-2024.3-${{ github.event.repository.default_branch }}
+#          use-caches: ${{ (github.ref_name == github.event.repository.default_branch) && 'true' || 'false' }}
         env:
-          QODANA_TOKEN: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJvcmdhbml6YXRpb24iOiIzam94cSIsInByb2plY3QiOiJ6RVdRYSIsInRva2VuIjoiMzFXMWEifQ.pzWQAOWoUROyv9Sv3UacNlU9UUFsVdAVXzBn3dxEvJY
+          QODANA_TOKEN:  ${{ secrets.QODANA_TOKEN }}
+          SUPER_ENV: "testttttt"

.github/workflows/test-docker-combinations.yml

@@ -0,0 +1,87 @@
+name: Test Docker Combinations
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ test-docker-* ]
+
+jobs:
+  test-matrix:
+    name: "Test (⚙️ ${{ matrix.os }}, 🐳 ${{ matrix.docker-version }})"
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          # This combination FAILS in qodana-cli dependabot PRs
+          - os: ubuntu-latest
+            docker-version: latest
+          # This combination WORKS
+          - os: ubuntu-latest
+            docker-version: v25.0
+          # This combination WORKS
+          - os: ubuntu-24.04-arm
+            docker-version: latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Docker version
+        if: matrix.docker-version != 'latest'
+        run: |
+          # Install specific Docker version
+          curl -fsSL https://get.docker.com | VERSION=${{ matrix.docker-version }} sh
+          docker --version
+
+      - name: Show environment
+        run: |
+          echo "OS: $(uname -a)"
+          echo "Docker version: $(docker --version)"
+          echo "Architecture: $(uname -m)"
+          echo "Runner: ${{ runner.os }} / ${{ runner.arch }}"
+
+      - name: Install Qodana CLI
+        run: |
+          curl -fsSL https://jb.gg/qodana-cli/install | bash
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Verify Qodana CLI installation
+        run: |
+          qodana --version
+
+      - name: Run Qodana scan with CLI
+        env:
+          QODANA_TOKEN: ${{ secrets.QODANA_TOKEN || secrets.QODANA_LICENSE_ONLY_TOKEN }}
+        run: |
+          if [ -z "$QODANA_TOKEN" ]; then
+            echo "⚠️  No QODANA_TOKEN available, using free linter"
+            IMAGE="jetbrains/qodana-jvm-community:latest"
+          else
+            echo "✓ QODANA_TOKEN available, using paid linter"
+            IMAGE="jetbrains/qodana-dotnet:latest"
+          fi
+
+          echo "Testing with image: $IMAGE via qodana CLI"
+
+          mkdir -p results
+
+          # Run Qodana via CLI (mimics TestAllCommandsWithContainer)
+          qodana scan \
+            -i ${IMAGE} \
+            --cache-dir $(pwd)/.qodana-cache \
+            --results-dir $(pwd)/results \
+            --fail-threshold 5 \
+            --print-problems
+
+          echo "✓ Scan completed successfully"
+
+      - name: Check results
+        run: |
+          if [ -f results/qodana.sarif.json ]; then
+            echo "✓ SARIF report generated"
+            ls -lh results/
+          else
+            echo "❌ SARIF report NOT generated"
+            exit 1
+          fi

.gitignore

@@ -0,0 +1,10 @@
+.gradle
+build/
+results/
+qodana-results/
+.qodana-cache/
+.qodana-test-cache/
+.DS_Store
+*.log
+fastagent.jsonl
+gradle.properties

.gitlab-ci.yml

@@ -0,0 +1,17 @@
+qodana:
+  only:
+    - develop
+    - master
+    - merge_requests
+  image:
+    name: jetbrains/qodana-jvm
+    entrypoint: [""]
+  variables:
+    QODANA_TOKEN: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJvcmdhbml6YXRpb24iOiIzam94cSIsInByb2plY3QiOiJ6RVdRYSIsInRva2VuIjoiMzFXMWEifQ.pzWQAOWoUROyv9Sv3UacNlU9UUFsVdAVXzBn3dxEvJY
+  script:
+    - qodana --save-report --baseline=qodana.sarif.json --results-dir=$CI_PROJECT_DIR/qodana
+      --report-dir=$CI_PROJECT_DIR/qodana/report
+  artifacts:
+    paths:
+      - qodana/report/
+    expose_as: 'Qodana report'

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "dot"]
+	path = dot
+	url = git@github.com:ivanovec/dot.git

.gradle/buildOutputCleanup/cache.properties

@@ -1,2 +1,2 @@
-#Sun Aug 21 20:56:16 EEST 2022
-gradle.version=6.8
+#Thu Jul 13 13:59:16 EEST 2023
+gradle.version=8.2.1