update-dependency-checksums.yml

name: UpdateChecksums
on:
    workflow_dispatch:

permissions: read-all

jobs:
  build:
    name: Dependency checksum compaction action
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
        with:
          fetch-depth: 0
          token: ${{ secrets.PUBLISH_KEY }}
      - name: Set up JDK 17
        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
        with:
          distribution: temurin
          java-version: 17
      - name: Remove previous version
        run: cp gradle/verification-metadata-clean.xml gradle/verification-metadata.xml
      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@dbbdc275be76ac10734476cc723d82dfe7ec6eda # v3.4.2
        with:
          cache-disabled: true
      - name: Update checksums
        run: ./gradlew clean file-barj-job:checkstyleMain licensee --write-verification-metadata sha256
      - name: Git commit
        run: |
          git config --global user.name 'Esta Nagy'
          git config --global user.email 'nagyesta@gmail.com'
          git add gradle/verification-metadata.xml
          git commit -asm "Pinning dependency checksums {patch}"
          git push -f --set-upstream origin ${{ github.ref_name }}