test with matrix structure #14

	name: "FindSecBugs"

	on:
	push:
	branches:
	- main
	- rh/action-test
	# run on new pushes only for non-draft PRs
	pull_request:
	branches:
	- main
	types:
	- opened
	- synchronize
	- reopened
	- ready_for_review
	workflow_dispatch:

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Setup Java
	uses: actions/setup-java@v4
	with:
	distribution: 'temurin'
	java-version: '17'
	- name: Build
	uses: gradle/gradle-build-action@v2
	with:
	arguments: build -x check --parallel -Pversion=0.0.0
	- name: Upload JARs
	uses: actions/upload-artifact@v4
	with:
	name: jar-bundle
	path: '*/.jar'

	scan:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	strategy:
	# We need to run it multiple times to manually fix the file paths and exclude gradle results
	matrix:
	module: [ 'codyze-cli/', 'codyze-core/', 'codyze-backends/cpg/' ]
	steps:
	- name: Download JARs
	uses: actions/download-artifact@v4
	with:
	name: jar-bundle
	path: '${{ matrix.module }}/'
	- name: Run FindSecBugs for Codyze CLI
	uses: advanced-security/spotbugs-findsecbugs-action@v1
	with:
	spotbugs_target: ${{ matrix.module }}
	java_distribution: 'temurin'
	java_version: '17'
	path_prefix: '${{ matrix.os }}src/main/kotlin/'

Provide feedback