SONARJAVA-5050 Update rule metadata with correct scope (#4822) #2705
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: dogfood merge | |
| # This workflow is triggered on pushes to master and dogfood branches | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - 'dogfood/**' | |
| # commenting 'delete' action, as it is triggered way too often | |
| # delete: | |
| # branches: | |
| # - 'dogfood/**' | |
| env: | |
| SLACK_CHANNEL: team-lang-java-notifs | |
| SLACK_USERNAME: Dogfood build action | |
| jobs: | |
| dogfood_merge: | |
| runs-on: ubuntu-latest | |
| name: Update dogfood branch | |
| permissions: | |
| id-token: write # required for SonarSource/vault-action-wrapper | |
| steps: | |
| - name: get secrets | |
| id: secrets | |
| uses: SonarSource/vault-action-wrapper@d1c1ab4ca5ad07fd9cdfe1eff038a39673dfca64 # tag=2.4.2-1 | |
| with: | |
| secrets: | | |
| development/kv/data/slack webhook | SLACK_WEBHOOK; | |
| development/github/token/{REPO_OWNER_NAME_DASH}-dogfood-merge token | dogfood_token; | |
| - name: git octopus step | |
| env: | |
| GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).dogfood_token }} | |
| id: dogfood | |
| uses: SonarSource/gh-action_dogfood_merge@v1 | |
| with: | |
| dogfood-branch: 'dogfood-on-peach' | |
| # Use the output from the `dogfood` step | |
| - name: Get the name of the dogfood branch and its HEAD SHA1 | |
| run: echo "The dogfood branch was `${{ steps.dogfood.outputs.dogfood-branch }}` and its HEAD SHA1 was `${{ steps.dogfood.outputs.sha1 }}`" | |
| #slack notifications | |
| - name: Notify success on Slack | |
| uses: Ilshidur/[email protected] | |
| env: | |
| SLACK_WEBHOOK: ${{ fromJSON(steps.secrets.outputs.vault).SLACK_WEBHOOK }} | |
| SLACK_OVERRIDE_MESSAGE: 'Dogfood build for `${{ steps.dogfood.outputs.sha1 }}`: *successful*' | |
| with: | |
| args: 'Succeed to build dogfood branch' | |
| - name: Notify failures on Slack | |
| uses: Ilshidur/[email protected] | |
| if: failure() | |
| env: | |
| SLACK_WEBHOOK: ${{ fromJSON(steps.secrets.outputs.vault).SLACK_WEBHOOK }} | |
| SLACK_OVERRIDE_MESSAGE: 'Dogfood build for `${{ steps.dogfood.outputs.sha1 }}`: *failed*, see the logs at https://github.com/SonarSource/sonar-java/actions' | |
| with: | |
| args: 'Fail to build dogfood branch' |