CI/CD & Build

GitHub Actions workflows, Maven build configuration, SonarCloud analysis, and Docker image generation.

GitHub Actions Workflows

Three workflows are defined under .github/workflows/.

deploy.yml — Build & Release

Trigger: Push to master branch, or manual workflow_dispatch.

Key details:

Publishes the JAR to GitHub Packages using the GH_PAT secret.
Automatically tags the commit with the version from pom.xml (e.g., v1.0.0).
The settings.xml at the repo root wires GitHub Packages authentication using GITHUB_ACTOR and GH_PAT.

sonar-report.yaml — Code Quality

Trigger: Push to any branch, or pull request.

Secrets required:

Secret	Purpose
`SONAR_TOKEN`	SonarCloud authentication
`SONAR_PROJECT_KEY`	Project identifier on SonarCloud
`SONAR_ORG`	SonarCloud organisation name
`GH_PAT`	GitHub Packages read access (for arya-banking-common)

Coverage reports are sourced from: target/site/jacoco/jacoco.xml

A helper script add-secrets.sh is included to set these secrets via the GitHub CLI:

Bash code-highlight

./add-secrets.sh

auto-create-issues.yaml — Issue Automation

Trigger: Delegated to the shared reusable workflow:
arya-banking-workflows/.github/workflows/issue-creation.yaml@main

Reads .github/issues.json and automatically creates GitHub Issues with labels and milestones. This allows planned tasks to be tracked as issues without manual creation.

Maven Build Configuration

Key Build Plugins

Plugin	Version	Purpose
`maven-compiler-plugin`	`3.11.0`	Wires MapStruct + Lombok annotation processors in the correct order
`spotbugs-maven-plugin`	`4.8.6.1`	Static bytecode analysis — flags potential bugs
`jacoco-maven-plugin`	`0.8.13`	Code coverage instrumentation and XML report generation
`spring-boot-maven-plugin`	—	Produces executable JAR + Buildpack container image

Annotation Processor Order

MapStruct must run after Lombok so that Lombok-generated getters/setters are visible to MapStruct during compilation:

Xml code-highlight

<compilerArgs>
  <arg>-Amapstruct.suppressGeneratorTimestamp=true</arg>
  <arg>-Amapstruct.defaultComponentModel=spring</arg>
</compilerArgs>
<annotationProcessorPaths>
  <path>org.projectlombok:lombok:1.18.36</path>
  <path>org.mapstruct:mapstruct-processor:1.5.5.Final</path>
</annotationProcessorPaths>

Container Image

The spring-boot-maven-plugin builds a container image using Cloud Native Buildpacks with an Ubuntu Noble base:

Bash code-highlight

mvn spring-boot:build-image

The resulting image is tagged as arya-banking-admin-service:{version}.

Local Docker Compose

A docker-compose.yaml at the repo root provides a minimal local Kafka stack for testing future event publishing features:

Yaml code-highlight

services:
  kafka:
    image: confluentinc/cp-kafka
    ports:
      - 9092:9092
      - 29092:29092
      - 29093:29093
    environment:
      KAFKA_PROCESS_ROLES: broker,controller
      KAFKA_NODE_ID: 1
      CLUSTER_ID: 5hci6rGNQECCvCLOiFDKow

  schema-registry:
    image: confluentinc/cp-schema-registry
    ports:
      - 8081:8081
    depends_on:
      - kafka

The full platform infrastructure (Vault, Keycloak, Eureka, Config Server, MongoDB) is managed in the arya-banking-infra repository using concern-based Compose files sharing the arya-banking-net Docker network.

cicdgithub-actionsmavensonardocker

Data Models & Common Library

Roadmap & Known Issues