Merge pull request #153 from FortnoxAB/dependabot/github_actions/acti… #306

	# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven
	name: Java CI with Maven

	on:
	push:
	branches:
	- main
	pull_request:
	types:
	- opened
	- synchronize

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
	with:
	egress-policy: audit

	- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	with:
	persist-credentials: false

	- name: Set up JDK 17
	uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
	with:
	java-version: '17'
	distribution: 'temurin'
	cache: maven
	- name: Build with Maven
	run: ./mvnw --batch-mode --no-transfer-progress package --file pom.xml

	# Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
	# - name: Update dependency graph
	# uses: advanced-security/maven-dependency-submission-action@4f64ddab9d742a4806eeb588d238e4c311a8397d

Provide feedback