Adds a ci pipeline

[mattknatt]

Summary by CodeRabbit

• Chores
  • Added continuous integration pipeline for automated build and verification.

[coderabbitai]

📝 Walkthrough

Walkthrough

A new GitHub Actions CI workflow has been added that automatically builds and verifies the project on pushes to the main branch and pull requests. The workflow runs on Ubuntu using JDK 25 with Maven dependency caching, executing the standard Maven verify command.

Changes

Cohort / File(s)	Summary
CI Workflow Configuration .github/workflows/ci.yml	New GitHub Actions workflow file defining a CI pipeline that builds and verifies the project using JDK 25 and Maven with dependency caching enabled.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A pipeline springs to life so bright,
With Maven's dance and JDK's might,
On every push, we build with care,
Testing code with rabbit's flair! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Adds a ci pipeline' directly and clearly describes the main change—adding a GitHub Actions CI workflow file to the project.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

.github/workflows/ci.yml (1)

9-13: Set explicit least-privilege workflow permissions.

Define minimal token permissions (contents: read) to reduce default token exposure.

Suggested patch

 on:
   push:
     branches:
       - main
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/ci.yml around lines 9 - 13, The workflow currently uses
default token permissions; add explicit least-privilege permissions by setting a
top-level permissions block in the workflow YAML for the build job (or at
workflow root) with at minimum permissions: contents: read to limit token scope;
modify the jobs: build block (or workflow root) to include the permissions key
so the GITHUB_TOKEN has only the required read access.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/ci.yml:
- Around line 24-25: The CI step named "Build and test" currently runs "./mvnw
clean verify -B" which can fail with "Permission denied"; before invoking the
Maven wrapper ensure it is executable by adding a chmod step (e.g., run chmod +x
./mvnw) or combine it with the existing run command so the workflow first sets
the executable bit on ./mvnw then runs the wrapper; update the step that
references "./mvnw" accordingly.

---

Nitpick comments:
In @.github/workflows/ci.yml:
- Around line 9-13: The workflow currently uses default token permissions; add
explicit least-privilege permissions by setting a top-level permissions block in
the workflow YAML for the build job (or at workflow root) with at minimum
permissions: contents: read to limit token scope; modify the jobs: build block
(or workflow root) to include the permissions key so the GITHUB_TOKEN has only
the required read access.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 28ba5203-9784-4f71-a0cd-81def414e4e2

📥 Commits

Reviewing files that changed from the base of the PR and between 8c5dd09 and cd5f9e6.

📒 Files selected for processing (2)

• .github/workflows/ci.yml
• mvnw