.travis.yml

@@ -1,5 +1,5 @@
-install: mvn install --quiet -DskipTests=true -B
-script: mvn test --quiet -B
-language: java
-jdk:
-  - openjdk7
+install: mvn install --quiet -DskipTests=true -B
+language: java
+jdk:
+  - openjdk8
+

Jenkinsfile

@@ -0,0 +1,130 @@
+@Library('github.com/connexta/cx-pipeline-library@master') _
+@Library('github.com/connexta/github-utils-shared-library@master') __
+
+pipeline {
+    agent {
+        node {
+            label 'linux-small'
+            customWorkspace "/jenkins/workspace/${JOB_NAME}/${BUILD_NUMBER}"
+        }
+    }
+    options {
+        buildDiscarder(logRotator(numToKeepStr:'25'))
+        disableConcurrentBuilds()
+        timestamps()
+        skipDefaultCheckout()
+    }
+    triggers {
+        /*
+          Restrict nightly builds to master branch, all others will be built on change only.
+          Note: The BRANCH_NAME will only work with a multi-branch job using the github-branch-source
+        */
+        cron(BRANCH_NAME == "master" ? "@weekly" : "")
+		pollSCM("H/10 * * * *")
+    }
+    environment {
+        LARGE_MVN_OPTS = '-Xmx8192M -Xss128M -XX:+CMSClassUnloadingEnabled -XX:+UseConcMarkSweepGC '
+        LINUX_MVN_RANDOM = '-Djava.security.egd=file:/dev/./urandom'
+        GITHUB_USERNAME = 'codice'
+        GITHUB_TOKEN = credentials('github-api-cred')
+        GITHUB_REPONAME = 'ddf-support'
+    }
+    stages {
+        stage('Setup') {
+            steps {
+                dockerd {}
+                slackSend color: 'good', message: "STARTED: ${JOB_NAME} ${BUILD_NUMBER} ${BUILD_URL}"
+                postCommentIfPR("Internal build has been started, your results will be available at build completion.", "${GITHUB_USERNAME}", "${GITHUB_REPONAME}", "${GITHUB_TOKEN}")
+            }
+        }
+
+        // Checkout the repository
+        stage('Checkout repo') {
+            steps {
+                retry(3) {
+                    checkout([$class: 'GitSCM', branches: [[name: "refs/heads/${BRANCH_NAME}"]], doGenerateSubmoduleConfigurations: false, extensions: [[$class: 'WipeWorkspace'], [$class: 'LocalBranch', localBranch: "${BRANCH_NAME}"], [$class: 'CloneOption', timeout: 30, shallow: true]], submoduleCfg: [], userRemoteConfigs: scm.userRemoteConfigs ])
+                }
+            }
+        }
+
+        stage('Full Build') {
+            when {
+                expression { env.CHANGE_ID == null } 
+            }
+
+            options {
+                timeout(time: 1, unit: 'HOURS')
+            }
+            steps {
+                withMaven(maven: 'maven-latest', mavenSettingsConfig: 'feca3f61-1da1-4887-a9ad-dd4a41fd4423', mavenOpts: '${LARGE_MVN_OPTS} ${LINUX_MVN_RANDOM}') {
+                    sh 'mvn clean install -B -DskipITs'
+                }
+            }
+        }
+
+        /*
+          Deploy stage will only be executed for deployable branches. 
+          It will also only deploy in the presence of an environment variable JENKINS_ENV = 'prod'. This can be passed in globally from the jenkins master node settings.
+        */
+        stage('Deploy') {
+            when {
+                allOf {
+                    expression { env.CHANGE_ID == null }
+                    expression { env.BRANCH_NAME ==~ /((?:\d*\.)?\d*\.x|master)/ }
+                    environment name: 'JENKINS_ENV', value: 'prod'
+                }
+            }
+            options {
+                timeout(time: 1, unit: 'HOURS')
+            }
+            steps{
+                withMaven(maven: 'maven-latest', jdk: 'jdk8-latest', globalMavenSettingsConfig: '51e52749-c47a-4e11-9c58-0adf485626f5', mavenSettingsConfig: 'codice-maven-settings', mavenOpts: '${LINUX_MVN_RANDOM}') {
+                    sh 'mvn deploy -nsu -DskipTests=true -Dpmd.skip=true -Dfindbugs.skip=true -Dcheckstyle.skip=true'
+                }
+            }
+        }
+
+        stage ('SonarCloud') {
+            when {
+                // Currently Sonar is not run for pull requests
+                expression { env.CHANGE_ID == null }
+            }
+            environment {
+                SONARQUBE_GITHUB_TOKEN = credentials('SonarQubeGithubToken')
+                SONAR_TOKEN = credentials('sonarqube-token')
+            }
+            options {
+                timeout(time: 1, unit: 'HOURS')
+            }
+            steps {
+                withMaven(maven: 'maven-latest', jdk: 'jdk11', globalMavenSettingsConfig: '51e52749-c47a-4e11-9c58-0adf485626f5', mavenSettingsConfig: 'feca3f61-1da1-4887-a9ad-dd4a41fd4423', mavenOpts: '${LARGE_MVN_OPTS} ${LINUX_MVN_RANDOM}') {
+                            sh 'mvn clean -q -B -DskipTests=true -Dfindbugs.skip=true -Dcheckstyle.skip=true org.jacoco:jacoco-maven-plugin:prepare-agent package sonar:sonar -Dsonar.host.url=https://sonarcloud.io -Dsonar.login=$SONAR_TOKEN  -Dsonar.organization=codice -Dsonar.projectKey=ddf-support:master -Dsonar.organization=codice'
+                }
+            }
+        }
+    }
+    post {
+        always{
+            postCommentIfPR("Build ${currentBuild.currentResult} See the job results in [legacy Jenkins UI](${BUILD_URL}) or in [Blue Ocean UI](${BUILD_URL}display/redirect).", "${GITHUB_USERNAME}", "${GITHUB_REPONAME}", "${GITHUB_TOKEN}")
+        }
+        success {
+            slackSend color: 'good', message: "SUCCESS: ${JOB_NAME} ${BUILD_NUMBER}"
+        }
+        failure {
+            slackSend color: '#ea0017', message: "FAILURE: ${JOB_NAME} ${BUILD_NUMBER}. See the results here: ${BUILD_URL}"
+        }
+        unstable {
+            slackSend color: '#ffb600', message: "UNSTABLE: ${JOB_NAME} ${BUILD_NUMBER}. See the results here: ${BUILD_URL}"
+        }
+        cleanup {
+            catchError(buildResult: null, stageResult: 'FAILURE') {
+                echo '...Cleaning up workspace'
+                cleanWs()
+                sh 'rm -rf ~/.m2/repository'
+                wrap([$class: 'MesosSingleUseSlave']) {
+                    sh 'echo "...Shutting down Jenkins slave: `hostname`"'
+                }
+            }
+        }
+    }
+}

gitsetup/.gitignore

@@ -0,0 +1,3 @@
+classpath.txt
+blacklist-words.txt
+blacklist-words.mvn

gitsetup/commit-prefix.txt

@@ -0,0 +1 @@
+DDF

gitsetup/pom.xml

@@ -0,0 +1,123 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+/**
+ * Copyright (c) Codice Foundation
+ *
+ * This is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either
+ * version 3 of the License, or any later version.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ * See the GNU Lesser General Public License for more details. A copy of the GNU Lesser General Public License is distributed along with this program and can be found at
+ * <http://www.gnu.org/licenses/lgpl.html>.
+ *
+ **/
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>ddf.support</groupId>
+        <artifactId>support-pom</artifactId>
+        <version>2.3.18-SNAPSHOT</version>
+    </parent>
+
+    <groupId>ddf.support</groupId>
+    <artifactId>gitsetup</artifactId>
+    <packaging>pom</packaging>
+    <name>DDF Support Git Setup</name>
+    <description>DDF Support Git Setup Scripts and Configuration</description>
+
+    <dependencies>
+        <dependency>
+            <groupId>ddf.support</groupId>
+            <artifactId>support-githooks</artifactId>
+            <version>${project.version}</version>
+        </dependency>
+    </dependencies>
+
+    <profiles>
+        <profile>
+            <id>gitsetup</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.5.0</version>
+                        <executions>
+                            <execution>
+                                <id>install-hooks</id>
+                                <phase>install</phase>
+                                <goals>
+                                    <goal>java</goal>
+                                </goals>
+                                <configuration>
+                                    <mainClass>org.codice.git.Setup</mainClass>
+                                    <arguments>
+                                        <argument>${project.basedir}</argument>
+                                        <argument>install</argument>
+                                        <argument>${settings.location}</argument>
+                                    </arguments>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>clean-hooks</id>
+                                <phase>clean</phase>
+                                <goals>
+                                    <goal>java</goal>
+                                </goals>
+                                <configuration>
+                                    <mainClass>org.codice.git.Setup</mainClass>
+                                    <arguments>
+                                        <argument>${project.basedir}</argument>
+                                        <argument>clean</argument>
+                                    </arguments>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+        <profile>
+            <id>gitclasspath</id>
+            <!--
+              this profile will automatically activate if the classpath cached file doesn't exist
+              in order to re-generate it
+            -->
+            <activation>
+                <file>
+                    <missing>${basedir}/classpath.txt</missing>
+                </file>
+            </activation>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.apache.maven.plugins</groupId>
+                        <artifactId>maven-dependency-plugin</artifactId>
+                        <version>3.0.0</version>
+                        <executions>
+                            <execution>
+                                <id>build-classpath</id>
+                                <phase>generate-sources</phase>
+                                <goals>
+                                    <goal>build-classpath</goal>
+                                </goals>
+                                <configuration>
+                                    <includeScope>runtime</includeScope>
+                                    <outputFile>classpath.txt</outputFile>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+    <build>
+        <plugins>
+            <!-- Deactivate plugins from parent pom not required here -->
+        </plugins>
+    </build>
+</project>

gitsetup/whitelist-words.txt

@@ -0,0 +1,22 @@
+#
+# Copyright (c) Codice Foundation
+# <p/>
+# This is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser
+# General Public License as published by the Free Software Foundation, either version 3 of the
+# License, or any later version.
+# <p/>
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# Lesser General Public License for more details. A copy of the GNU Lesser General Public License
+# is distributed along with this program and can be found at
+# <http://www.gnu.org/licenses/lgpl.html>.
+#
+# This file contains whitelist words that are accepted in the content of any files and commit messages
+# for this repository. This list will superseed any entries from the blacklist-words.txt file.
+#
+# Lines that starts with "REGEX:" are considered Java regular expressions, all others are considered
+# literals. All entries are always matched case insensitive.
+#
+# Make sure that an entry in this file matches exactly an entry in the blacklist-words.txt file in
+# order for it to be overridden.
+#