JUnit 4 -> 5 #1195

	name: CI PRs

	on:
	pull_request:

	env:
	MAVEN_THREADS: '-T 1'

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: jlumbroso/free-disk-space@main
	with:
	tool-cache: false
	# cache maven repo
	- uses: actions/cache@v3
	with:
	path: ~/.m2/repository
	key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
	restore-keys: \|
	${{ runner.os }}-m2-
	# jdk8
	- uses: actions/setup-java@v3
	with:
	java-version: '17'
	distribution: 'liberica'
	# secrets not available to PR.
	# - name: Login dockerhub
	# if: ${{ secrets.DOCKERHUB_USERNAME != null && secrets.DOCKERHUB_USERNAME != '' }}
	# uses: docker/login-action@v3
	# with:
	# username: ${{ secrets.DOCKERHUB_USERNAME }}
	# password: ${{ secrets.DOCKERHUB_TOKEN }}
	# build
	- name: Build
	run: \|
	./mvnw -B -s .github/settings.xml -Pasciidoctordocs,restdocs clean install
	# clean m2 cache
	- name: Clean cache
	run: \|
	find ~/.m2/repository -type d -name '*SNAPSHOT' \| xargs rm -fr
	scan:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/trivy-action@master
	with:
	scan-type: 'fs'
	ignore-unfixed: true
	format: 'table'
	severity: 'CRITICAL,HIGH'
	- name: 'Scanned'
	shell: bash
	run: echo "::info ::Scanned"
	done:
	runs-on: ubuntu-latest
	needs: [ scan, build ]
	steps:
	- name: 'Done'
	shell: bash
	run: echo "::info ::Done"

Provide feedback