FIPS Implementation

Author: scottf

.github/workflows/fips-main.yml

@@ -0,0 +1,45 @@
+name: FIPS Main Snapshot
+permissions:
+  contents: read
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'fips/**'
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        tc: [ 17, 21, 25 ]
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./fips
+    env:
+      BUILD_EVENT: ${{ github.event_name }}
+      TARGET_COMPATIBILITY: ${{ matrix.tc }}
+      OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+      OSSRH_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+      SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
+      SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+      SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v5
+        with:
+          java-version: 25
+          distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          gradle-version: current
+      - name: Check out code
+        uses: actions/checkout@v4
+      - name: Build and Test
+        run: chmod +x gradlew && ./gradlew clean test jacocoTestReport
+      - name: Verify Javadoc
+        run: ./gradlew javadoc
+      - name: Publish Snapshot
+        run: ./gradlew -i publishToSonatype

.github/workflows/fips-pr.yml

@@ -0,0 +1,37 @@
+name: Fips Pull Request
+permissions:
+  contents: read
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - 'fips/**'
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        tc: [ 17, 21, 25 ]
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./fips
+    env:
+      BUILD_EVENT: ${{ github.event_name }}
+      TARGET_COMPATIBILITY: ${{ matrix.tc }}
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v5
+        with:
+          java-version: 25
+          distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          gradle-version: current
+      - name: Check out code
+        uses: actions/checkout@v4
+      - name: Build and Test
+        run: chmod +x gradlew && ./gradlew clean test jacocoTestReport
+      - name: Verify Javadoc
+        run: ./gradlew javadoc

.github/workflows/fips-release.yml

@@ -0,0 +1,38 @@
+name: Fips Publish Release
+permissions:
+  contents: read
+on:
+  push:
+    tags: [ 'fips/*' ]
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        tc: [ 17, 21, 25 ]
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./fips
+    env:
+      BUILD_EVENT: "release"
+      TARGET_COMPATIBILITY: ${{ matrix.tc }}
+      OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+      OSSRH_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+      SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
+      SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+      SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v5
+        with:
+          java-version: 25
+          distribution: 'temurin'
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          gradle-version: current
+      - name: Check out code
+        uses: actions/checkout@v4
+      - name: Build, Sign and Publish Release
+        run: chmod +x gradlew && ./gradlew clean compileJava publishToSonatype closeAndReleaseSonatypeStagingRepository