test

.github/workflows/all-matrix.yml

@@ -0,0 +1,83 @@
+name: All Matrix Use Cases
+
+on:
+  workflow_dispatch:
+
+jobs:
+
+  #  Use Case 1: 
+  basic-matrix:
+    name: "Basic Matrix: ${{ matrix.os }} - Java ${{ matrix.java }}"
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        java: [17, 20]
+    steps:
+      - name: Echo basic combo
+        run: |
+          echo "OS=${{ matrix.os }}, Java=${{ matrix.java }}"
+
+  #  Use Case 2: 
+  include-matrix:
+    name: "Include Matrix: ${{ matrix.os }} - Java ${{ matrix.java }}"
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            java: 17
+          - os: windows-latest
+            java: 20
+    steps:
+      - name: Echo included pair
+        run: |
+          echo "Included pair: ${{ matrix.os }} - ${{ matrix.java }}"
+
+  # Use Case 3:
+  exclude-matrix:
+    name: "Exclude Matrix: ${{ matrix.os }} - Java ${{ matrix.java }}"
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        java: [17, 20]
+        exclude:
+          - os: windows-latest
+            java: 20
+    steps:
+      - name: Echo allowed pair
+        run: |
+          echo "Allowed pair: ${{ matrix.os }} - ${{ matrix.java }}"
+
+  # Use Case 4:
+  custom-key-matrix:
+    name: "Custom Key Matrix: ${{ matrix.os }} - Mode ${{ matrix.mode }}"
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            java: 17
+            mode: dev
+          - os: windows-latest
+            java: 20
+            mode: prod
+    steps:
+      - name: Echo custom-mode combo
+        run: |
+          echo "Running in ${{ matrix.mode }} mode with Java ${{ matrix.java }} on ${{ matrix.os }}"
+
+  # Use Case 5:
+  failfast-matrix:
+    name: "Fail-Fast Off Matrix: ${{ matrix.env }}"
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        env: [alpha, beta, prod]
+    steps:
+      - name: Simulate environment
+        run: |
+          echo "Running environment: ${{ matrix.env }}"
+          if [[ "${{ matrix.env }}" == "beta" ]]; then exit 1; fi

.github/workflows/basic-matrix.yml

@@ -0,0 +1,14 @@
+name: Basic Matrix
+
+on:
+  workflow_dispatch:
+
+jobs:
+  basic-matrix:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        java: [17, 20]
+    steps:
+      - run: echo "OS=${{ matrix.os }}, Java=${{ matrix.java }}"

.github/workflows/cicd.yml

@@ -1,153 +1,58 @@
-name: CICD Pipeline 
+# File: .github/workflows/ci.yml
+name: CI Pipeline
 
 on:
+  # 1) Pushes to main
   push:
-    branches: [ "main" ]
+    branches:
+      - main
+    paths-ignore:
+      - 'docs/**'
+      - '**/*.md'
+      - '**/*.txt'
+  # 2) Issue events (opened & edited)
+  issues:
+    types:
+      - opened
+      - edited
+  # 3) Pull requests (opened & new commits)
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+  # 4) Manual dispatch with an environment input
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Which environment to deploy to'
+        required: true
+        default: 'staging'
 
 jobs:
-  compile:
-    runs-on: self-hosted
-
-    steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK 17
-      uses: actions/setup-java@v4
-      with:
-        java-version: '17'
-        distribution: 'temurin'
-        cache: maven
-    - name: Build with Maven
-      run: mvn compile
-
-  security-check:
-    runs-on: self-hosted
-    needs: compile
-
+  build:
+    name: Build
+    runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - name: Trivy Installation
-      run: |
-        sudo apt-get install -y wget apt-transport-https gnupg lsb-release
-        wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
-        echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list
-        sudo apt-get update -y
-        sudo apt-get install -y trivy
-
-    - name: Trivy FS Scan
-      run: trivy fs --format table -o fs-report.json .
-
-    - name: Gitleaks Installation
-      run: sudo apt install gitleaks -y
-    - name: Gitleaks Code Scan
-      run: gitleaks detect source . -r gitleaks-report.json -f json
+      - uses: actions/checkout@v4
+      - name: Print Build
+        run: echo "Building for ${{ github.event_name }} event"
 
   test:
-    runs-on: self-hosted
-    needs: security-check
+    name: Test
+    runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK 17
-      uses: actions/setup-java@v4
-      with:
-        java-version: '17'
-        distribution: 'temurin'
-        cache: maven
-    - name: Unit Test Cases
-      run: mvn test
-
-  build_project_and_sonar_scan:
-    runs-on: self-hosted
-    needs: test
+      - uses: actions/checkout@v4
+      - name: Print Test
+        run: echo "Testing on ${{ runner.os }} via ${{ github.event_name }}"
+
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'issues' }}    # optional: skip deploy on issue events
     steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK 17
-      uses: actions/setup-java@v4
-      with:
-        java-version: '17'
-        distribution: 'temurin'
-        cache: maven
-    - name: Build Project
-      run: mvn package
-    - name: Upload JAR artifact
-      uses: actions/upload-artifact@v4
-      with:
-        name: app-jar
-        path: target/*.jar 
-
-    - uses: actions/checkout@v4
-      with:
-        # Disabling shallow clones is recommended for improving the relevancy of reporting
-        fetch-depth: 0
-    - name: SonarQube Scan
-      uses: SonarSource/sonarqube-scan-action@v5.0.0 # Ex: v4.1.0, See the latest version at https://github.com/marketplace/actions/official-sonarqube-scan
-      env:
-        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}
-
-    - name: SonarQube Quality Gate check
-      id: sonarqube-quality-gate-check
-      uses: sonarsource/sonarqube-quality-gate-action@master
-      with:
-        pollingTimeoutSec: 600
-      env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}
-
-  buils_docker_image_and_push:
-    runs-on: self-hosted
-    needs: build_project_and_sonar_scan
-    steps:
-    - uses: actions/checkout@v4
-    - name: Download JAR artifact
-      uses: actions/download-artifact@v4
-      with:
-        name: app-jar
-        path: app  # this will download JAR to ./app folder
-
-    - name: Login to Docker Hub
-      uses: docker/login-action@v3
-      with:
-        username: ${{ vars.DOCKERHUB_USERNAME }}
-        password: ${{ secrets.DOCKERHUB_TOKEN }}
-    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-    - name: Build and Push Docker image
-      uses: docker/build-push-action@v6
-      with:
-        context: .
-        push: true
-        tags: adijaiswal/bankapp:latest
-        file: ./Dockerfile
-
-  deploy_to_kubernetes:
-    runs-on: self-hosted
-    needs: buils_docker_image_and_push
-    steps:
-    - name: Checkout Code
-      uses: actions/checkout@v4
-    - name: Install AWS CLI
-      run: |
-        curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
-        unzip awscliv2.zip
-        sudo ./aws/install
-    - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
-      with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        aws-region: ap-south-1
-    - name: Set up kubectl
-      uses: azure/setup-kubectl@v3
-      with:
-        version: latest
-    - name: Configure kubeconfig
-      run: |
-        mkdir -p $HOME/.kube
-        echo "${{ secrets.EKS_KUBECONFIG }}" > $HOME/.kube/config
-    - name: Deploy to EKS
-      run: |
-        kubectl apply -f ds.yml
-
-
+      - uses: actions/checkout@v4
+      - name: Print Deploy
+        run: |
+          echo "Deploying to ${{ github.event.inputs.environment || 'default' }}"

.github/workflows/combo.yml

@@ -0,0 +1,23 @@
+name: 6 Combine Env Vars Secrets
+
+on:
+  workflow_dispatch:
+
+env:                        # Workflow-level env
+  GLOBAL_ENV: workflow-env
+
+jobs:
+  combo-demo:
+    runs-on: ubuntu-latest
+
+    env:                    # Job-level env (can override workflow-level)
+      GLOBAL_ENV: job-env
+
+    steps:
+      - name: Print everything
+        run: |
+          echo "env.GLOBAL_ENV  = ${{ env.GLOBAL_ENV }}"
+          echo "vars.MY_VAR     = ${{ vars.MY_VAR }}"
+          echo "secrets.MY_SECRET = ${{ secrets.MY_SECRET }}"
+        env:
+          GLOBAL_ENV: step-env

.github/workflows/consume-info.yml

@@ -0,0 +1,19 @@
+name: Consume Generated Info
+
+on:
+  workflow_dispatch:
+
+jobs:
+  # Call the reusable workflow
+  call-generate:
+    uses: ./.github/workflows/generate-info.yml
+
+  # Consume its outputs
+  consumer:
+    needs: call-generate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Show the values
+        run: |
+          echo "Timestamp:    ${{ needs.call-generate.outputs.current-time }}"
+          echo "Random number: ${{ needs.call-generate.outputs.random-number }}"

.github/workflows/env-hierarchy.yml

@@ -0,0 +1,20 @@
+name: Env Override Levels - UC 2
+
+on:
+  workflow_dispatch:
+
+env:                         
+  LEVEL: workflow
+
+jobs:
+  env-test:
+    runs-on: ubuntu-latest
+
+    env:                      
+      LEVEL: job
+
+    steps:
+      - name: Print env
+        run: echo "env.LEVEL = ${{ env.LEVEL }}"
+        env:                 
+          LEVEL: step

.github/workflows/env-or-vars.yml

@@ -0,0 +1,18 @@
+name: Fallback Env or Vars - Uc 4
+
+on:
+  workflow_dispatch:
+
+jobs:
+  fallback-demo:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Step 1 – No env set (should fallback to vars)
+        run: echo "Value = ${{ env.MY_VAR || vars.MY_VAR }}"
+
+      - name: Step 2 – Env set (should override vars)
+        run: echo "Value = ${{ env.MY_VAR || vars.MY_VAR }}"
+        env:
+          MY_VAR: from-env
+