ci: Use reusable workflow for on code changes

Author: baptistegrimaud

.github/workflows/on-code-change.yml

@@ -13,120 +13,28 @@ on:
       - "docs/**"
 
 jobs:
-  static-analysis:
-    name: Static Analysis (linting, vulns)
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: jahia/jahia-modules-action/static-analysis@v2
-        with:
-          node_version: 20
-          yarn_version: 4.7.0
-          yarn_test_version: 4.7.0
-          auditci_level: critical
-
-  build:
-    name: Build Module
-    runs-on: self-hosted
+  on-code-change:
+    uses:  Jahia/jahia-modules-action/.github/workflows/reusable-on-code-change.yml@v2
+    secrets: inherit
+    with:
+      static_analysis_node_version: 20
+      static_analysis_auditci_level: critical
+      build_container_image: ghcr.io/jahia/jahia-docker-mvn-cache:17-jdk-noble-mvn-loaded
+      module_branch: ${{ github.ref }}
+      sonar_analysis_primary_release_branch: main
+      integration_tests_standalone_execute: true
+      module_id: javascript-modules-engine
+      integration_tests_testrail_project: Javascript Modules Engine
+      integration_tests_jahia_image: ghcr.io/jahia/jahia-ee-dev:8-SNAPSHOT
+      integration_tests_provisioning_manifest: provisioning-manifest-build.yml
+      integration_tests_should_use_build_artifacts: true
+      integration_tests_should_skip_testrail: true
     env:
-      NEXUS_INTERNAL_URL: ${{ secrets.NEXUS_INTERNAL_URL }}
-    container:
-      image: ghcr.io/jahia/jahia-docker-mvn-cache:17-jdk-noble-mvn-loaded
-      credentials:
-        username: ${{ secrets.GH_PACKAGES_USERNAME }}
-        password: ${{ secrets.GH_PACKAGES_TOKEN }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: jahia/jahia-modules-action/build@v2
-        with:
-          # the test module is built as part of the Maven build
-          tests_module_type: "disabled"
-          mvn_settings_filepath: ".github/maven.settings.xml"
-          nexus_username: ${{ secrets.NEXUS_USERNAME }}
-          nexus_password: ${{ secrets.NEXUS_PASSWORD }}
+      YARN_VERSION: 4.7.0
+      # glob filename, related to the ./artifacts/ folder, to use to fetch the prepackaged site. This jar is generated by the 'build' step.
+      # for nightly/manual tests, the prepackaged site is fetched from a Maven repository.
+      CYPRESS_PREPACKAGED_SITE_URL: "javascript-modules-samples-hydrogen-prepackaged-*.jar"
 
-  sonar-analysis:
-    name: Sonar Analysis
-    needs: build
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: jahia/jahia-modules-action/sonar-analysis@v2
-        with:
-          primary_release_branch: main
-          github_pr_id: ${{github.event.number}}
-          sonar_url: ${{ secrets.SONAR_URL }}
-          sonar_token: ${{ secrets.SONAR_TOKEN }}
-          mvn_settings_filepath: ".github/maven.settings.xml"
-          nexus_username: ${{ secrets.NEXUS_USERNAME }}
-          nexus_password: ${{ secrets.NEXUS_PASSWORD }}
-
-  integration-tests-standalone:
-    name: Integration Tests (Standalone)
-    needs: build
-    runs-on: self-hosted
-    strategy:
-      fail-fast: false
-    timeout-minutes: 45
-    steps:
-      - uses: jahia/jahia-modules-action/helper@v2
-      - uses: KengoTODA/actions-setup-docker-compose@main
-        with:
-          version: "1.29.2"
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "lts/*"
-      # Enable corepack, the Node-provided package manager manager
-      - run: corepack enable
-      - uses: actions/checkout@v4
-      - uses: jahia/jahia-modules-action/integration-tests@v2
-        with:
-          module_id: javascript-modules-engine
-          tests_path: "javascript-modules-engine/tests/"
-          testrail_project: Javascript Modules Engine
-          tests_manifest: provisioning-manifest-build.yml
-          jahia_image: ghcr.io/jahia/jahia-ee-dev:8-SNAPSHOT
-          jahia_license: ${{ secrets.JAHIA_LICENSE_8X_FULL }}
-          should_use_build_artifacts: true
-          github_artifact_name: js-eng-${{ github.run_number }}
-          bastion_ssh_private_key: ${{ secrets.BASTION_SSH_PRIVATE_KEY_JAHIACI }}
-          docker_registries: |
-            [
-              {
-                "registry": "ghcr.io",
-                "username": "${{ secrets.GH_PACKAGES_USERNAME }}",
-                "password": "${{ secrets.GH_PACKAGES_TOKEN }}"
-              },
-              {
-                "username": "${{ secrets.DOCKERHUB_USERNAME }}",
-                "password": "${{ secrets.DOCKERHUB_PASSWORD }}"
-              }
-            ]
-          nexus_username: ${{ secrets.NEXUS_USERNAME }}
-          nexus_password: ${{ secrets.NEXUS_PASSWORD }}
-          tests_report_name: Test report (Standalone)
-          testrail_username: ${{ secrets.TESTRAIL_USERNAME }}
-          testrail_password: ${{ secrets.TESTRAIL_PASSWORD }}
-          incident_pagerduty_api_key: ${{ secrets.INCIDENT_PAGERDUTY_API_KEY }}
-          incident_pagerduty_reporter_email: ${{ secrets.INCIDENT_PAGERDUTY_REPORTER_EMAIL }}
-          incident_pagerduty_reporter_id: ${{ secrets.INCIDENT_PAGERDUTY_REPORTER_ID }}
-          incident_google_spreadsheet_id: ${{ secrets.INCIDENT_GOOGLE_SPREADSHEET_ID }}
-          incident_google_client_email: ${{ secrets.INCIDENT_GOOGLE_CLIENT_EMAIL }}
-          incident_google_api_key_base64: ${{ secrets.INCIDENT_GOOGLE_PRIVATE_KEY_BASE64 }}
-          zencrepes_secret: ${{ secrets.ZENCREPES_WEBHOOK_SECRET }}
-        env:
-          YARN_VERSION: 4.7.0
-          # glob filename, related to the ./artifacts/ folder, to use to fetch the prepackaged site. This jar is generated by the 'build' step.
-          # for nightly/manual tests, the prepackaged site is fetched from a Maven repository.
-          CYPRESS_PREPACKAGED_SITE_URL: "javascript-modules-samples-hydrogen-prepackaged-*.jar"
-      - name: Test Report
-        uses: dorny/test-reporter@v1
-        if: success() || failure()
-        with:
-          name: Tests Report (Standalone)
-          path: javascript-modules-engine/tests/artifacts/results/xml_reports/**/*.xml
-          reporter: java-junit
-          fail-on-error: "false"
 
   # This workflow ensures that Windows builds are exactly the same as on other platforms
   test-on-windows: