Skip to content

Commit

Permalink
Update sonarqube.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
Gieraldo authored Oct 4, 2023
1 parent fbe4b3a commit 1d47730
Showing 1 changed file with 18 additions and 33 deletions.
51 changes: 18 additions & 33 deletions .github/workflows/sonarqube.yml
Original file line number Diff line number Diff line change
@@ -1,40 +1,25 @@
name: SonarQube analysis

on:
# Trigger analysis when pushing in master or pull requests, and when creating
# a pull request.
push:
branches: [ "master" ]
branches:
- master
pull_request:
branches: [ "master" ]
workflow_dispatch:

permissions:
pull-requests: read # allows SonarQube to decorate PRs with analysis results
types: [opened, synchronize, reopened]

name: SonarQube Scan
jobs:
Analysis:
sonarqube:
name: SonarQube Trigger
runs-on: ubuntu-latest

steps:
- name: Analyze with SonarQube

# You can pin the exact commit or the version.
# uses: SonarSource/[email protected]
uses: SonarSource/sonarqube-scan-action@7295e71c9583053f5bf40e9d4068a0c974603ec8
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on SonarQube, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret)
SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} # add the URL of your instance to the secrets of this repo with the name SONAR_HOST_URL (Settings > Secrets > Actions > add new repository secret)
with:
# Additional arguments for the sonarcloud scanner
args:
# Unique key of your project. You can find it in SonarQube > [my project] > Project Information (top-right menu)
# mandatory
-Dsonar.java.jdkHome=/usr/lib/jvm/java-11-openjdk-amd64
-Dsonar.projectKey=sonarqube-tester2
# Comma-separated paths to directories containing main source files.
#-Dsonar.sources= # optional, default is project base directory
# When you need the analysis to take place in a directory other than the one from which it was launched
#-Dsonar.projectBaseDir= # optional, default is .
# Comma-separated paths to directories containing test source files.
#-Dsonar.tests= # optional. For more info about Code Coverage, please refer to https://docs.sonarcloud.io/enriching/test-coverage/overview/
# Adds more detail to both client and server-side analysis logs, activating DEBUG mode for the scanner, and adding client-side environment variables and system properties to the server-side log of analysis report processing.
#-Dsonar.verbose= # optional, default is false
- name: Checking out
uses: actions/checkout@master
with:
# Disabling shallow clone is recommended for improving relevancy of reporting
fetch-depth: 0
- name: SonarQube Scan
uses: kitabisa/[email protected]
with:
host: ${{ secrets.SONAR_HOST_URL }}
login: ${{ secrets.SONAR_TOKEN }}

0 comments on commit 1d47730

Please sign in to comment.