From b51881b9341f98ea08c187e40a73c2c6a6aa2e72 Mon Sep 17 00:00:00 2001
From: Angel Eduardo Hincho Jove <82984150+ahincho@users.noreply.github.com>
Date: Sun, 12 Jul 2026 13:10:05 -0500
Subject: [PATCH 1/2] ci: bootstrap CI + activate build matrix, OWASP and SBOM
 workflows (NOVA-SEMVER-19/20/21)

This repo had no CI workflow at all. Adds ci.yml invoking:
- reusable-build-maven.yml
- reusable-build-matrix.yml (Java 21+25)
- reusable-owasp-check.yml (continue-on-error until NVD_API_KEY is
  configured)
- reusable-sbom.yml

Also fixes the distributionManagement URL: it still had the literal
'OWNER' placeholder instead of 'ahincho' (NOVA-SEMVER-00c fixed this
for the 10 Gradle repos with maven-publish, but missed this Maven repo's
distributionManagement block).
---
 .github/workflows/ci.yml | 41 ++++++++++++++++++++++++++++++++++++++++
 pom.xml                  |  2 +-
 2 files changed, 42 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..c0f6b24
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,41 @@
+name: CI/CD Pipeline
+
+on:
+  pull_request:
+    branches:
+      - main
+    types:
+      - opened
+      - synchronize
+      - reopened
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-build-maven.yml@main
+    secrets: inherit
+
+  matrix:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-build-matrix.yml@main
+    with:
+      build-tool: maven
+    secrets: inherit
+
+  owasp:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-owasp-check.yml@main
+    continue-on-error: true # TODO: remove once NVD_API_KEY org secret is configured (NOVA-SEMVER-20)
+    with:
+      build-tool: maven
+    secrets: inherit
+
+  sbom:
+    if: github.event_name == 'pull_request'
+    uses: ahincho/nova-devops/.github/workflows/reusable-sbom.yml@main
+    with:
+      build-tool: maven
+    secrets: inherit
diff --git a/pom.xml b/pom.xml
index 09a1888..4af075d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@
     <distributionManagement>
         <repository>
             <id>github</id>
-            <url>https://maven.pkg.github.com/OWNER/nova-spring-boot-archetype</url>
+            <url>https://maven.pkg.github.com/ahincho/nova-java-spring-boot-archetype</url>
         </repository>
     </distributionManagement>
 

From e6f59f167c6e2557c303659b91e51482c3ab5481 Mon Sep 17 00:00:00 2001
From: Angel Eduardo Hincho Jove <82984150+ahincho@users.noreply.github.com>
Date: Sun, 12 Jul 2026 13:17:55 -0500
Subject: [PATCH 2/2] fix(ci): remove invalid continue-on-error from reusable
 workflow job

'continue-on-error' is not a supported keyword for a job that calls a
reusable workflow via 'uses:' - it broke workflow file parsing entirely.
Moved the actual fix to nova-devops (step-level, in the reusable
workflow itself).
---
 .github/workflows/ci.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c0f6b24..a0b611e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,6 @@ jobs:
   owasp:
     if: github.event_name == 'pull_request'
     uses: ahincho/nova-devops/.github/workflows/reusable-owasp-check.yml@main
-    continue-on-error: true # TODO: remove once NVD_API_KEY org secret is configured (NOVA-SEMVER-20)
     with:
       build-tool: maven
     secrets: inherit