CI setupを共通actionに集約

[ai-kurou]

概要

CI の Java/Gradle setup 手順を composite action に集約し、release workflow のファイル名と表示名を整理します。

変更内容

• .github/actions/setup/action.yml を追加
• PR/Main/Maestro/Release workflow の Java/Gradle setup を共通 action に置き換え
• on-release.yml を release-app.yml にリネーム
• release workflow の表示名を Release App に変更

検証

• YAML parse: .github/actions/setup/action.yml, .github/workflows/*.yml 対象
• git diff --check

補足

• この環境に actionlint が無いため未実施です。

Summary by CodeRabbit

• Chores
  • Java 17とGradleのビルド環境セットアップを共通化しました。
  • プルリクエスト、メインブランチ、リリース関連のビルド・テスト自動化を更新しました。
  • リリースワークフローの表示名を「Release App」に変更しました。

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: bc4a8ae4-cbb4-4e40-a00c-80a433e64ee7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• ✅ Review completed - (🔄 Check again to review again)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[coderabbitai]

🧹 Nitpick comments (1)

.github/workflows/release-app.yml (1)

1-1: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win

ワークフロー全体の既定権限を読み取り専用に固定してください。

releaseジョブはcontents: writeを明示していますが、トップレベルのpermissionsがないため、他のジョブがリポジトリ既定権限を継承する可能性があります。トップレベルにcontents: readを追加し、releaseジョブの書き込み権限は維持してください。

提案

 name: Release App
+permissions:
+  contents: read

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/release-app.yml at line 1, Set the workflow-level default
permissions to read-only by adding top-level contents: read near the workflow
name, while preserving the release job’s explicit contents: write permission.

Source: Linters/SAST tools

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In @.github/workflows/release-app.yml:
- Line 1: Set the workflow-level default permissions to read-only by adding
top-level contents: read near the workflow name, while preserving the release
job’s explicit contents: write permission.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 0a0f3a4d-9df2-4056-955b-19c4b93ac137

📥 Commits

Reviewing files that changed from the base of the PR and between 121e45a and bf0afa2.

📒 Files selected for processing (5)

• .github/actions/setup/action.yml
• .github/workflows/maestro-release-smoke.yml
• .github/workflows/on-main-merge.yml
• .github/workflows/on-pull-request.yml
• .github/workflows/release-app.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!