From 06320b96edf2448e3388f74f7aad378f7b665226 Mon Sep 17 00:00:00 2001 From: Anita Stanisz Date: Tue, 7 Jan 2025 11:15:51 +0100 Subject: [PATCH 1/2] SQRP-122 Reference SonarQube Community Build --- README.md | 31 ++++++++++++++++++------------- images/SonarQubeServer.png | Bin 3979 -> 0 bytes images/SonarQube_dark.png | Bin 0 -> 6060 bytes images/SonarQube_light.png | Bin 0 -> 6284 bytes 4 files changed, 18 insertions(+), 13 deletions(-) delete mode 100644 images/SonarQubeServer.png create mode 100644 images/SonarQube_dark.png create mode 100644 images/SonarQube_light.png diff --git a/README.md b/README.md index 23aceec..8235922 100644 --- a/README.md +++ b/README.md @@ -1,16 +1,21 @@ -# SonarQube Server Quality Gate check [![QA](https://github.com/SonarSource/sonarqube-quality-gate-action/actions/workflows/run-qa.yml/badge.svg)](https://github.com/SonarSource/sonarqube-quality-gate-action/actions/workflows/run-qa.yml) +# SonarQube Quality Gate check [![QA](https://github.com/SonarSource/sonarqube-quality-gate-action/actions/workflows/run-qa.yml/badge.svg)](https://github.com/SonarSource/sonarqube-quality-gate-action/actions/workflows/run-qa.yml) -Check the Quality Gate of your code with [SonarQube Server](https://www.sonarsource.com/products/sonarqube/) to ensure your code meets your own quality standards before you release or deploy new features. +Check the Quality Gate of your code with [SonarQube Server](https://www.sonarsource.com/products/sonarqube/) or [SonarQube Community Build](https://www.sonarsource.com/open-source-editions/sonarqube-community-edition/) to ensure your code meets your own quality standards before you release or deploy new features. - + + + Logo + -SonarQube Server is the leading product for Continuous Code Quality & Code Security. It supports most popular programming languages, including Java, JavaScript, TypeScript, C#, Python, C, C++, and many more. +[SonarQube Server](https://www.sonarsource.com/products/sonarqube/) and [SonarQube Community Build](https://www.sonarsource.com/open-source-editions/sonarqube-community-edition/) are widely used static analysis solutions for continuous code quality and security inspection. + +They help developers detect coding issues in 30+ languages, frameworks, and IaC platforms, including Java, JavaScript, TypeScript, C#, Python, C, C++, and [many more](https://www.sonarsource.com/knowledge/languages/). ## Requirements A previous step must have run an analysis on your code. -Read more information on how to analyze your code [here](https://docs.sonarqube.org/latest/analysis/github-integration/) +Read more information on how to analyze your code for SonarQube Server [here](https://docs.sonarsource.com/sonarqube-server/latest/devops-platform-integration/github-integration/introduction/) and for SonarQube Community Build [here](https://docs.sonarsource.com/sonarqube-community-build/devops-platform-integration/github-integration/introduction/) ## Usage @@ -36,14 +41,14 @@ jobs: fetch-depth: 0 # Triggering SonarQube analysis as results of it are required by Quality Gate check. - - name: SonarQube Server Scan + - name: SonarQube Scan uses: sonarsource/sonarqube-scan-action@master env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} # Check the Quality Gate status. - - name: SonarQube Server Quality Gate check + - name: SonarQube Quality Gate check id: sonarqube-quality-gate-check uses: sonarsource/sonarqube-quality-gate-action@master with: @@ -54,13 +59,13 @@ jobs: # Optionally you can use the output from the Quality Gate in another step. # The possible outputs of the `quality-gate-status` variable are `PASSED`, `WARN` or `FAILED`. - - name: "Example show SonarQube Server Quality Gate Status value" + - name: "Example show SonarQube Quality Gate Status value" run: echo "The Quality Gate status is ${{ steps.sonarqube-quality-gate-check.outputs.quality-gate-status }}" ``` Make sure to set up `pollingTimeoutSec` property in your step, to avoid wasting action minutes per month (see above example). If not provided, the default value of 300s is applied. -When using this action with [sonarsource/sonarqube-scan](https://github.com/SonarSource/sonarqube-scan-action) action or with [C/C++ code analysis](https://docs.sonarqube.org/latest/analysis/languages/cfamily/) you don't have to provide `scanMetadataReportFile` input, otherwise you should alter the location of it. +When using this action with [sonarsource/sonarqube-scan](https://github.com/SonarSource/sonarqube-scan-action) action or with [C/C++ code analysis](https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/languages/c-family/overview/) (available only for SonarQube Server) you don't have to provide `scanMetadataReportFile` input, otherwise you should alter the location of it. Typically, report metadata file for different scanners can vary and can be located in: @@ -71,7 +76,7 @@ Typically, report metadata file for different scanners can vary and can be locat Example usage: ```yaml -- name: SonarQube Server Quality Gate check +- name: SonarQube Quality Gate check uses: sonarsource/sonarqube-quality-gate-action@master with: scanMetadataReportFile: target/sonar/report-task.txt @@ -79,11 +84,11 @@ Example usage: ### Environment variables -- `SONAR_TOKEN` – **Required** this is the token used to authenticate access to SonarQube Server. You can read more about security tokens [here](https://docs.sonarqube.org/latest/user-guide/user-token/). You can set the `SONAR_TOKEN` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). +- `SONAR_TOKEN` – **Required** this is the token used to authenticate access to SonarQube. You can read more about security tokens [here](https://docs.sonarqube.org/latest/user-guide/user-token/). You can set the `SONAR_TOKEN` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). -- `SONAR_HOST_URL` – **Optional** this tells the scanner where SonarQube Server is hosted, otherwise it will get the one from the scan report. You can set the `SONAR_HOST_URL` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). +- `SONAR_HOST_URL` – **Optional** this tells the scanner where SonarQube is hosted, otherwise it will get the one from the scan report. You can set the `SONAR_HOST_URL` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). -- `SONAR_ROOT_CERT` – Holds an additional root certificate (in PEM format) that is used to validate the SonarQube Server certificate. You can set the `SONAR_ROOT_CERT` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). +- `SONAR_ROOT_CERT` – Holds an additional root certificate (in PEM format) that is used to validate the SonarQube certificate. You can set the `SONAR_ROOT_CERT` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). ## Quality Gate check run diff --git a/images/SonarQubeServer.png b/images/SonarQubeServer.png deleted file mode 100644 index 1052c506645947c1d7d25bef15d4d5c6ec984fc1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 3979 zcmai1`8O2q_aDnxW(p}g*^;r0C1V+Sk6m_C$QFtaV<-{AShCBK5TP0SBt*7i>}w3N z%}hy%$o95H7{hlyf57+i`QhGs&U2shJolV?@9Vr?Nl42Z=RtxX003~_#Ms~#J^rSf zB^wLf%WgQP&;$EJV~5880GRtf#xOC9IROAT|1mMpwFxQMEWGLWlfXN0c4s#DSOy#w zYG|w^_rORVM+6O3i4j5ZHMsjg3p=Gih6fWo;Wo)3g|&ddVNif*`1b;S>DbIB&*hWS zN}YmUlauE3^z_2pIUZchT^6T%;{sgFMZy>GVj9ocY`BDtm}S{GBpG>_6D~x9VtNvF zfL-?ta53{r5=h;L{QuvzlfNY@$auah`T+N1L8eZ%jRDbYQQbo}M}<*VsYm^QZ#g4Y z4bX4#v}r9*Gp-*Zc0f&rhjx;yESReOs!~}e;Tu$IJUn7 z>0JC74i_4`jT2Nf4##8g-Yj$eJ*TBfkN-H9C}(}zl=S};j2x{z(sb&#C|I$gKLf^x zsmFhaI;1%<*w3d%u-O=4R`>jRPWzk+-+7N>gad^R7SR+@#*fNs&SARTg-=ghP%zf* zi=8~loNG0V5;2BN8n&XVQA_fpO*oefVv)}sKnTlp zlP%4xQiczLh_!1jy+S}Ou83@K9(fi*z23veuxz$z%WX_qdF%j@;imqo%aV$SUEWJG zwR1kl!v1kD8KoYvNad>oBp~lM-#FM@i+>u3Z6FJ-Vp5hFI(-YFc5Ni%d~~xf)vpjL zXHnsTngV_)d%vpbR6ekjBr*`Wsr)Ba2gG|pG*ykq2nX#wid6fBt%$=a#i-#UXz zEr)=%>m9g0pZo&uq&WOGAzDLp^Q-&KJnBbt#`-ZWF%*W}ntG4>a4e#qUS&x#>QmHO z#SCHYZgXk;3WzyFG;sN=uoBn{Y%p5{w>sO0~vQ8+8_94bfFZJdh@$lubA#f(p zCb;+(;r`V*#t>#D&um?BD|)RG(u=~>u_gA(J5bqC>wWX!z&j|W0C~#;-PMIdByC6t zPeOTJK{0*YkGZd_PW&F}Ryuoemw`x9QoUGJ|LamGAI56P(1t4%4m#d73wd3ARy3%oTWtak)Op3_2hKd+mUCO>3YO|EOeO{j_X zt!T-?BXzoE^($H%gcpI_yH*tJXF%uJwKL#5G_HENde@F#W03doI4-rx5D2?z{TF{ufuLHd1dg5IH-vg(Lb#7DA=z=S+vb zOXJ@olih$j%=6fwCgF)kj(~RZM_wUy4*XN#SU$Wv;wdKAkaOSV4;Hu zA3(c+cR9iQ#obRD9h0Zl$3lVwzj38*?}r`OZSGyuzIN1v}1>N6;lWWuQ+=RdmX1X-zW1_|DM`lnhbUUXc}P-o1_8lU&-_& z{2&3(u@gaGIbP|PV;#baN_C|XX3=YyM+*f@#!HN-5{m6l>=yczQ@Z^4={wkM)w%_^`VlMboKfu;7H*g9BloIV;!&IytoR z=*BHp^jl#}TCP2s-oMn(+B738E|i~)zOGoo!dxo-ud88r?-S?c7Ngg$E*bZmv@f+$ znj%n(r8-59!hY)=AzBt={CP4!l`*&e*VX3P(qD$?n6d5)uUJTk#Ptrz#iLTBc_F;t zu9;WdT+Cgri)&aes+`~%ePnL0EBgtTGp zPE|>U#zvZ+;?M8{JaDyzV3csCoso2U;n%xe=RIKKD=OfFrNoGl8k3XcJ+f*F?P4?2 z5Gu@iZ)-Xx_{rysprhCJp4AOS82Skl4$bvz`5*T991!1+0HMckZcb@nLn2WrA9F~EmL>|N}UH*sm$>=B}j^^4y&eWKJJK&>$F(uBqe8REM6ToAyQV{?_g|(t;}ZputRA^u_G@TQ-R0H;f*u-2DS0 zcGoG@=r&hMH@^||fgU0I07Jn_i+cMprDluCa*HR{W+}sl6Y*=yha2`~Bwb*zONM#S z8-kdCwXrzg(aUkuUFzF`AFcAD&b&DxCXv#%AEm)l;LLlr&;{UUg8Wia{Hp|{Mw7RJV>Nn{(6mOn?kRKSgFjw@paqyS z?fun*karJoXSoIgiZoYRvEucDGi5yWfP3J|1P_gL+qgV=eC2wGUR&7tjT?9KvMg(G zcOz74OP$N?!U)m)5mQ$pFugvdr0L(A<* zJ&Va_vFfq1z3E7x<$!-YAl?Hi8X7i$1nyt%@BLTEA+K)GNh|52u`dnj5|;h6&zvJy?;TU4t9S0J z?Ng+gH5o=**RaKTE+x9w(IzBxer%2FvIU74bz^&&O-ua|H6eZlgyI;!D`SJyqPfsm z?R~k(`lT?>s(UONs&IHh%)@e+II@0DX~9)KdPBvmmZ}oBm#5D_GO3H% zZvHY@i80a+(06wYZ%zLx{Het5E7cfshKR7Zd2Qj<@pr@&{|qQ+K{%OVlTP5Cr)kAj zF8#rf<^$RgY4CGhyEzj_6PcUJWjjSV3C}m}ioF>dBAX2C9s8MMpJnq4m& zmXLZp`+SVqhAUP;fTxSQY5|zE%AYTWh1E>1NAHOu>s5(6Kb6s8cRP+KSbjQI5Iqzk zz6B?S=MjZqLSl-93#reaIT9(KJocZ-94zXcHCAWMb6tcyLg>XMtl9#>_1?J}Se%42 zLXz_WLFLsw@tPuuo9%k+Ft?S4Ure}vnS(9_PT3f*P#LA>88&{l7Vm}M*bfki(TBlB z13^3w&n-Px0|Orm9Z16}(wbq~I(sY&Kb-1=>L8f_QSUNLaT=b<@&U%kWucBjTX<#9M4oX^yQAL?OxRq zV?wR)Jd+Fu3|S_A?MY@UTilga4^A7SX{y1#mRB|BSo#)ZBNSBDKuF${P{i!()^BL8 zG~CVT54Hyy!BP^=0{U{PBR70A(Uf#b<-uPh@QgHUCqk~CVxpkLh#ivh(TS(&pI^YD zUMFXNfE~L;RBL!KFKl>+TS)9uF#7EXE}X&Bn;*XTp9}D*y~pZIwQKj=t{&HyK$dSZ z`W&T++jImlPV-G2?G^p_aY8&0)oTnN!*8jk>d*p~9y>}(TAcF$x#q6_M7p-8T(pDn zeV@1BJwFpqOFVYFQ`)>VQjk^c*V(tmrVp8XVhr_6{;p@wAX_j#%r}&Lz0sHyBb(1Q zBusPs8yiTt0eN}ESlI{@F~5+d)7X5yxItxTpu~MtZ6TZRHBe>v10SGz{O92pkQa+; zU;uF1=ajQDX!3n7)AltF(+cY9uN1yu+;Z1tEi=jDGZFh33Hv#F#e2KjcoTMVmikO> z+QWFl5mmQsH#lO=L2l2khVPGG##=3e%i=b?n~VB+Er{Jj$w}tID2XJF0&9Oo=cY_U zg(D>Nf%)pEyz1rw?tcO?gkf;_+s1;D6P{q9FMqD#V`dNYlYtAup=5PmYcxWiwr?in z5MshLnjOr8kB`-ire$wj_3TX*J5dc!)PXO3-7h*0@f`MH!GOD6`x3xYEbtr!F|#*p wk#I|p4Ht9YS3E1L_4hHygIT7p5~FEIy1B+ZpfA%k#NG-Tqfy{HPp!0cWh128Y^ zd~2e?|6u;UshOEPkR$AG@~xEj9eg7RDGz!WMl))}7aB$b^Si5woNSe)`F$%MOZr_!1e3b>6d;HMTzjXSIBAce?YpBL z9_xGvCm#h*7AW{uTzY_^8T^9AEORObACW8sF+aXTEO-`J^cx<%jIqSeGat@rfS>*$ zVg)6bwa=3C{y!mG1m|W*KVt&m;jwFsA6KVf@RkeISg8z*51Tn(Xh?T4^o|?#Qq_jV zb3mNLiP{|fD6NkkSm{^|wGNP!OXEG>-UUH8h~CoC5ck&fd%DIf&ZjAed!>o(A0TBI9XCpIFzfvBr)uByXK+v^~T)2O(uz;w-w*=Sgxf2i+Hni1TfPwv&(4E}EBby6f0mVIcZ7n@hu0n%wgy;>!<@N^z8A zHN)|ow^8(>S@0)={PlroXLRUw$R*E+V{wEh#ap{*yJ8YZi8fUp%Yj2}?N_Ig#!{}& zi9>TQ?PWY4BC=Ec&m{!DTHjvV`%Ap|VydQ3YDc#8XQbxf$lp%M+qBuENzlEVJ3gI; z&W>rU!Gi?jxKMLX?-ITWWk>n7EVJ)p6&Cn98#(!|29`EPOfu8583fE8eqW;x%BTXI z1lb_?_dN$iHM*GOT?Vb<;q1ny_Gtxk-U$k`g$qX8x)mgAVrRMX2i;ZSi}sb)8nqx%QGF}IHEQ7wEcIo|w z)b!^Qnx4o6sR_6FnoKKMm|3--sYZ^c0&dB-fBzo-cN#G$)}_n8sNnRDrtCNO_{}Nh zo7zynoPQrid?4?7a6yn6dc;s|8Gvxx_ku7lg+qY8h5T6fAHhV)4PCE7)pzjm(h(wy z1+d!oVC6IaQ&cL-Aq^4V6`8L^_*~b1i|>eXpjFf*kHxO2rw=xRNC54N`IB;Ys}8L8 z?wE@()}oglv_c!AU9mY66a?(q!VXZe>5}f~2ZfNPGHO}=da(Pu^JUelq<4=8y>i*= zexGyl&yO>lwpfcO|4B;Y_k@InbNaNqKn1*FEgFp|((5|h9{+JmgpjrlfsfugZd#Fc zC45=Sbnf)vbni8NJ#!dIvbBTG%TN_o{8OIH50)gAZLg>LX}^Hjb{nXfVKQpWx|5?D zYk+iG5BH=R&Fe+i(8`yziOp#$Hi8rPv!m=aI8#klsy}Aa#^jL-!_@N_MeggW70%%N z@=&;TgHUazAB!Ke(F$x5*QVQc#TOa(cJq(llZGV%H5%p|*wlMyzRa~Yh2*v!Nbd5Z z3?zCJG*T9tK3jdS3?~og+z_45Ptr7{L)w=j7g~d;19D;)2YI=qcrCX)P{F5wAi(+K z+f;N5*oRfx_UQbZM{HM~RDRq>pW9Ac zp!JJ_5h51_bsdMVw=Mi-n~39L^5LM;5FqwVfpylZh(z=>dobq`lUZ8%*?6PMg-H9; z7M}8EQEs|77Wp=ar|+R;RTSz9#q=E3L8PG}TB@ zUyVb-DfbagR|cu5As+_`Eyr(H<=)4m41F^9-bN4Gmtob{3(B=t0s9G2dsn=CiAJk| zseW6I(cX&pXUOv$xzEU0dG-9Uxd*r2aBMb_c8Nwmhm)|-A zkfhr+8v4G<#;-?T)$p#2@Zvz{6R$p{nYgGgWRCL8f-^fC&xV(4{Jr-_mJAgUyQ9ys zbKcoC{}dp|;)si)p|x%EN@mr1JpLY>qNQ=>M@J0I#d@@yT?5_b{7RrEMEKx_XzAYe zS)%r$wI5~Gg=_5P#}mT3;jn&JS!~X#9MvCGbw+?QDhq2GMV9Bc_uPS9H3f}H4cpB>+m-dqHw)wVB2quiF@ z1dwVlt-$x$w~e78^u~Qerz&!Ri|)m6BEPf|A~T=TnV2Q?4i}wn{9~Jtxhvx zH;tp7KkOx#_g?p6R+1h_C^pb*Nc1yXsXx(*Tda;~%t4t>i| zbujl)6>j-IaZcOXS=)4-EiN5EJs4`0P=s_D>HAJ?!l#D03A*A&+!EkC#Z{SIaoSe2 z22KYX$C%fv!+B}@hi7iQUP2;;1rY~P7a4+_7^zMPON(vvLtehwad&=AgqM@$z@KkR zQ&^djpSaHw{!t1V+i^lKJaOFlj*tzDAM zR&Co7%q$eg>}nRUs#b4AVMdY?zmJCQYVwF|@_M>rCx2yj8jO`j(id;U+tU_QTgW)M zdzoh$0nKS;4a;g&V6bkePyt6nnL~^3N4RmTBw7%DaOqF(f%{30t|V-tCj_ z7_Y!j=d~DrO@ud8w+mWhJNwm2BA*a<9b*Fsgrc2rm2TFT3AB6LO!6p--XWP*4R^)( zKxEr#9mzV8*Vt=DGXtaSPRgPA?=>z)8{_M2CU=m!Z&zpxX zjasDbROYwFIJlQ3t-}no5L_5lCu?O@ATP#k`76F2GYH0M=kbq4e_p0Gyrqs>WcCHJ znY@Txu>J~NcNhD##2Pt{?ZX%mBip=Y!HX=HHQXD$BMA!MBtM?&Nhx4wyzYD;|GFP* zTdQ9y?15&z73QfF5~)s^|LE+5>LVQVX7ibQgx`CwX!ENc`G#pwHfZ%$v>s>gOt02H zOsf^;xGOERW+=jjWLzK%)B=B?_wCswXCYMn%%$ai0VUgNMYzB}*z?*<5zMbqif(EofWS!j6(55@I$erB9V*d%jbX z%X%39hrmtNzM&tCt(BOO?4h>DWHx~ecBoIVIz1;Dc&-92Sh&F^;=swaTcUsJgkjs) zt-*ZCBd1C5N*X(R^zzQ`&>|7ljJH#qb(8q3)WisN<>})wO+aa2hf=#M1&Zytkyqfc zi68LvY{hjd>QiN}Mi$Q&si8Zs`#3kVy13)C6e&_!b~MAnf6MRy42l8ZAk=&e&O#;Y zZ8Z&Wf{CPUmvQ>joNIaqp&j&vd8J{UG`hgKN`Tcan92|Xc5Px(-bHD*$0)5NqplKNm$7NRT>h=DNAN^@B-sSVSu-tB`=G|-Y zU9w0=Z8?+3WUyl$waF^GS4(3^9Qn~zLz&Lao{-vr$hHhA^188d0J^B)QcG>Jd535KSq$Qa|M1;N?#^On!j7fb5Q^Z||3JXyjwR;KqvqR-f+wn6p6 zO6vbZO5n+dI}4c}Kk7Ol?%;IzVv;NNm5i(-b^huvKYOe+ob1ES?>ZI?qW8`l=j=S@ zzqaG|THzGxPeyrv=}X@7miO2G+I|nel?_xZ=zJj{E%Ez)%{Rc@lrvF*u9HYb*HVg* zs6yDP-cYM@E`pTV{o6>wFUPXB&s(7q^ut*bF4F2;R-1d1Pt70H$BM1^`|T|^318En zU{VA6v_=NXfpiip-^lM*%C7a$Xukm6F6bNL4^5&4bh{QmPPlQk3HrG57^tr-=NrQrj8FVsCz> z&Z0cYYE@nZgr8F_YXDJ~njquY_?4h?*ecJ7|3>N`XEV?w@L+u!)C$&q!TV`=;f(#u z5w&0wzW_D}-i`8!*zP}<4E7A2xBQj*C{ekcuB~&6MzP=kn^RJI&`vH_YebPBxgomy zOqxIirfgQ%QI5ZsbA|n+i{BY$$fl9Eu$`7YiMp-InCy*%Tu2QOj)gH6@8rsfsXSi_ z8rDa|D}>@?4)Eu{W6&4)s$b6;0u|8SqFYU+w)xg9MY~}CVm3bq!ibn!PQeVJsDtFh zV!F7NhHI_yJ50hi?^p{SOM`{Cxu7m`+zv7pIL5K^GE+`wC3$v>m$4 zj-U(qXhkyA@6-hK8zyu2Eq-0xDejX&8F_UYwIZGGqO|fSIK;Ev;vQ9~zbM0BDz@DN zNPg;%(@C#H00G>PF5DVn5wrVNFG;Go*~cD{RM0}F=IIKHN|BhvZ{yU1Z;@9w`fsYO zCLhWC{_C-CoEh=KJ4W}rd)kM$lP2^HR<%5#QwYk^ee9`UUPr_4uAM{XFB@68R~$TH zVaqhFH!jcuB)DSq5r{a*M(Sxtl5fp;uY~Y8a>r!(jNNPGQ;!iWiaq1c6pto8y!SPY zSUui&Y7!I3jXu~44L(Dp3^pDKGH2Sj8gvJ6aTK&Mg(Y#xuN0^yKwowaYti`o2Sq>C zjj?r^b|yyB!8o~IWv%-3?fwEpH7+8V^gh-z zS2Gi?=JX?I91_o-UDYq;L+!oI^Q24<&rhYR7AexW`T6f-kBM+08$$DkYES=uk@BPR zPDA0l8PzuwX%1s0nNk<@z<~YbV zozp;3TD1#N19QB~`5)W6@Z`XhxFo7Z^urKvpZK@2)_*c+1Fbw8XI%8P;mvL3KKVU7 zR-xF1*#EfSf1^E$D7=9rUAg}YB=G-=qrN3tD;02P6`lTwr{4jpikb@FVCJF!4-86G A?f?J) literal 0 HcmV?d00001 diff --git a/images/SonarQube_light.png b/images/SonarQube_light.png new file mode 100644 index 0000000000000000000000000000000000000000..803616cda7f4f34b7bac4fde5aeb67713414100b GIT binary patch literal 6284 zcmd6MXE3`1e{JFbM~yhAy0)0~0d=hu*_bjT-Zy z@c?5oL<|*N)iDP`4TroIq*cJ1mj?e|FuH#3O`NJMv2X|+R?QwCDCnwKKsYdZ8dx9c ziTTj3kw}S`Kz)cAD`*QS0o|ijfkS*3b-=;SEl-Gd<)RhYfVo=@i^IgjR(=S41k`!Z zaES#aARxi%FR0yGj%_X(2gL`YI0y1-y(`TQumh#OBM_M%CXN8!K;e)t5arNoEijj* zZ6n|^8z~``V)tLrwCN$m~l#k2z#8pT(B8AB>-zuA>qg~=Rx0L zw|;zU_h;3ngmMfuT-9F(%%8{nRvDlZDKyi8;4$|(5~8hoU=`hcKRwe#iKq^&}jtk=b0Ia+u#z(+YLxM%TQf8~c{VoA`*71eF)=>?T<-5B4<8^bRpkmA8&YW$+ef|OI z9c<9o^leNG<%br#2_0Or_+QIT>WJTP=%M^)>Fx@Xu!$PtO4-RC;m*Mt61Xw?l@(5< zh&qC{GdvrTB>(s5l}I^k8HR!G8`R1H>#e_Ujo`?Ka|GrgefzEBTTN){ou9`IdHqRX z1%VvMKh`aUz#AF(d?1OmZenWqvP?U}d(s?8(mk&VRIW70Ld7uK+fRTuU*ztbvLrYjB}5cEM1%wPT`Xv)l;&{c^q?6I!EENY z1wg=OQ}t2aNgdzjc+{IX%G-FRB`KYf@i-3u&~$g&4Q*OvJkBmR{nJk&2)9-=y$Lk% z2@hPoi!oeIw}zpn(p@%~`EnBx z3O_sLjT|PzMJ~>k+L+(AaR$~%1;6{?IS_Lbr^@+EgY!l94#EQv8T~LNgHrn@mfk5H z$EHZZ3ONf70$8&r7SpGRkfN3uhBM6@U1=UenK7pJB&7Q~R~}PGB*iezm65+pXI2Z3 z97S*qmc0j8LnC@$x_ZN_NtTZrwtPHy@~1y_2%kg;j# zESNye<+vSrC?|wWDcy(J6pXN~@#UFomuiVvN)SRPCOh%w&f`4I>&5Q@vJ8w-V`1ZL z9B!Y_Gjg1Ji@LX6Hw0>~hFpkSO^PctY8Dxzaswg%M9*P`?vuvw*PVmuw5xvcC&xn-c@O9 z&&aeY&useZl5jv-L?_A0P9~N_`AwrJm2izy`A}c$d*%P zP=Qq6z%n@ht_F^ff~k^JR+b;xC3;%gIVSEb+tSwbo&Ag8N|5^H6n*!64K1Xu?`_T^ zDKQ2r$GX+v39Je}qT9*Y-{51FJI}C!3Huvpom>%E3U(%w_T26ptsRuXk05W6acJ}r za@{*5cK~Ne(|$PjKyR@y#p|8UzMVrG8p7S4@m3Fq{q+=uEqVr7H;xgHM+V1KhJ z;~3+vE%-G38uy^D`LKF&m!SO{tZqS7Z=0z&P>8^T#8a;HR(f-?+UrJFX}Rp35+r41X?PyANAEpxeccM(h`+VJO z-Poq0uzDnu>e0S0*gss?N&VTVi;=>+xXG3PiG}nC;Oy@~0c^|f`a!~J65c_g-Rj~5 zVGABK_ZBwjC_wg8pB;FKl1E{@vSRgytA}1Z&FAmniJnY2-$Px2a6`rdbty!nV9Hm9 z9OO(77ik#@{y?&Rlwx>@umqPt zrv}D%q`Z1Zji$Lpdt{qOB3;xYf?0Z<75YjsO^bE1d=3+?$Ui z^2B1h=Q4Vz)g+%QyZVQ)oQ_fLt?{Fqnk-7m4dQlgAh1J7DRA~Lb~U5UW$XLz0ND?# zWAOn~JHtjaWyFXI0EY3U#4!%IBg6iF&0O|qZi%E@_V~G4CKW^-n@9S9*6I_JmoFyV zIz7DraEk87;^*KLYce!}DuuNI(OVWU%bJ|K?RxgFKCW>Dn(%nzanSsJ1xd%rw(E5K zjj#7;Xswd-u_gU#j5PdeF)*F{c3iqYr=pbaMX0saX_@PLM%Fn6M6;Imb9Vf4?JUPO zp!7j=>@n)UdC^6+X1ng14wwu^{|L9nY;@ayV0uC<-3~ib__>Gd zHyw!|1y{&0wabH~qVH9j*?|==@Cl2dD+{(lt00U?=2E(xJ#H|4d}sx#rg9)wUh#U= z*wB_yz-@oND}YAY%}M~?ZvJ$58(X3B!s%HLIcDQqfI;*WES?@m|RONj-BTbiQX12#8y^xwRUznDi& z6O#TKtj=@V{ySgOx^K4k($7>YMtGnwU4hVa4xSGx;kwg);w_%9Pn#M|tKsT2_46$Qp;t(qo=5@r zyaEu;uzLPb;Jn03E+n9xNfh27QX7{2;n|~=bt1Y0QzhZZ&r(7Ajw(sdZD~S;fqSeu zqlNdL%sSCb`sR*hb~kcHztntl$KTZ)ZWfe<&&88C@=|vTUhAv%lJ>A%&pl>qr~{(s z`@5r*ug2?bBII-)jb7S9blD-5SXUto^4T^)oqocJ0}1O=pnu`WF!bLKE$^~KZTWb^ z$fnnyitPP3zKl^1T#Et43h^3 zwxOsV%U>HrY-$|`S6#;qEjaIxrgA^RR7oG>+~JS|ER?a0KjCH3lePhZTHh^#`jbqv zIL}HR-%FXp*d7_11^!1k_4+eEFoI zNS?Wan1S#KxJWJ)yxz^56PPS%7T3%)y#3VZeT;X~&L)2YWt*uR(c&G?CdC6*0h3;y zEbzW`^2(Ik$2(v2Pq|UUIys$PX{w*|%4}|iFV3>ND>iU`d;T?__6*rJ|BIo>{_w}GSnwB}25wal@L$oK+n)sc`jl`lpE%8W6L4_>h ze(p}U$Vs|RTgbsIb$F>%!N`-JSr+S`MtYDVOvQDtDAiXrdv{#Fi6LvN-oK|x>bh;! zr`}44d-yn)M{4l6AHV;hG!hkzz|3v7&^O6GWK8bh-pkX{5IF%=oTj;#s%T{P!mIu1 z*wt%1@tG$B)3@2zlTWMW4dEbd1>UsWQJZJ+;iUfV{VW*!u-2@;e>PO-JtuN;O(zY) zRKhbBJjz02G!%~|Y5)h1FjwB@{4V6X*f>t>B$h8YEl)^+w%mJ1+eaeUV_1FF+wFJo z-sR5NkKOrV^zbc*yXoUB3;FvOJxxi?WeKd4A&@7U!7YR>o1pg zt^G{PE;5#H?dL)di0GwOhsi=Jz@7wgV0$TXV+qS|Vl8|rQB;YK>qx6WHb%}(d-v;C zUoifN&ugaVBjFo6T0&*2?#8b=i3#cQbLyJ? z#%L5hEZfOP4~AxyZ+M4btCUU8c@O01eXZ#0R?R9(kiUL(JheV`Hm%y`6BJ;h3&FLx z!zeT<76qkeHhqs^Eq-lVo-E95v$i)ChP%&t1H_~5hcDIsL^O^#v6&1#4E9Ao5u`X4 za|x@xA180rwZUC_t$TEnW?z?;C@}FxUHex?^`jr7V}pfJ{sx7~oAi<@6}0>C-w3V% zlE(BXy@XMt_xus{c7@YB)z@rP<^sxX4U|1mO_b z&!~3K7<{7ol}vn>km-Z8_Z*>KltsCviR3cU^ER(*f!~?7jDby-{LPBru3A7Kr^m@P z><*d84k&(7^~8&lQxf+*CIP!ySuD0mDnom@vExoLZ|*JLc0oyFK~6g zKf#F!&6uk?+)-dmS!<J?>!D4gnBD8JhC>!QzqOViW1zC-LtbAMOR|}cPOXhsl z(Q^hq&^%q~)D)qHhIOjtw;k`07kgA7b?Ko8LD$|_uuTSIHjzpokjcyF^+basc!l~Q zm+)er154K;{I53->g9RP_o;I$_)Mh)-Ba5!-h`SaKqhbnn~KQLYx&c}7VjI+HIy`r zMM_{tlcy?XGlY5&@Gi#dO zGWC_|LExYXRMvfmcfT|=v84FfrvSSmzZlsx0bN(WHhmdo6AS9q;qn0C%9gRWJsOe< zN1fY8x2dci7-@5yrqjRY#j#G>RS8&_=?amWmfte}t3SMaTy}bYlVw7kW-dp*?WZ>f zrwYx>!D9`dGUkRXO6oJDAqWikGN!)B7;*!7gTzZ=v9@T3J_Ua<63ej|t~_`d=?xwK zfM5KVP!n6;3SytzXe;m8i4M-r; zTP{F+IkS#bn@~g<=eRo|kFX|21a4@Ev5r7V2s0FE&E=NqlMi|)sJ%cm^jd# zde!s!ZH2wHUZ98X`z3Rj@_4+!4`-T#W+P73j<0HDgt~3__v-$qmQjezG&4{RM88uz zOSj;j2u4UNE?jxbzt<$Z(MV=+~}($*3Fxe!J+RWGc6DWr^Fy0t#n-pE&O2BH>3 z8--HUW5&v{S4feLele?RbY^zRnR(Z5!$ZmSon?zz+oj#!N^KO=T)^xwv4O3I;w#u@ zL^_+!q_`?uaW?e*1KyC`75qlcGM#MzvyyuGi1ZSa`fN+Ct*KF#zni*s)h?XWL3p|vopHqMeY}{ByO1n zyS$bLgrOzPI#^!xrIvw@S%F{&Gx&sY=tcmmT`V04NxhGjSywD74OrFGEhzOE2ld(R zn-qz0tomC);f|Om9Ff!tKujOh_lXU0(FftpbptoZQ<9p(l5FKksj~}4`B9~@461#p z`y6w_#2NM56uxi8wZNd4*NZeLetH@UQ+l!l4f88UIW`7PJra(i+BnAC z_;sG6aalLh60B{#%4({hDFG7`!mc1t7#k5elyYw{I~K+hKhOkzioKKzdzA`*I`bkn zUJ3FVLf!a@)PhspE%xu2s<(Z3J|_09QQm`ue8vuQ()DL-NDM7%GCLj0VN($7LtA1S0;FTz+`bb-cTo zMq$YSgC##+AG(7=j1?!*;MHOxoG$piMX(9Ii%I()N%4zybp8k)o!4Rl)!Zwhd50>l z$Xv?Md-9(z6gYD{_N(@QrG-rAkB!e&Bn_+792lg%ECy1bx_?32?wNi6Kjn;coDT14 z$XwT_uLY7@p?A?OAbOL0%CnHi@%{!6PG6{ zgSVtqbyO0ebWO`t3|o2KTg!4lhDW{}bNK(7xAOvGTjxK4ob>;=`2D}Tw{`=vm0S^a U%6;|@f4l&wA+(gr;FjqB2hWGMe*gdg literal 0 HcmV?d00001 From bf077450ef6614580147c55e0411c1d1e9cd63fc Mon Sep 17 00:00:00 2001 From: Anita Stanisz Date: Wed, 8 Jan 2025 10:47:11 +0100 Subject: [PATCH 2/2] SQRP-122 Reference SonarQube Community Build --- action.yml | 2 +- script/check-quality-gate.sh | 4 ++-- test/check-quality-gate-test.bats | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/action.yml b/action.yml index da1439c..85de7c6 100644 --- a/action.yml +++ b/action.yml @@ -17,7 +17,7 @@ inputs: required: false default: .scannerwork/report-task.txt pollingTimeoutSec: - description: "The maximum time (in seconds) to poll for SonarQube Server's Quality Gate status. Default: 300." + description: "The maximum time (in seconds) to poll for SonarQube's Quality Gate status. Default: 300." required: false default: "300" outputs: diff --git a/script/check-quality-gate.sh b/script/check-quality-gate.sh index fa9f95c..5ae8c9b 100755 --- a/script/check-quality-gate.sh +++ b/script/check-quality-gate.sh @@ -55,7 +55,7 @@ done printf '\n' if [[ ${status} == "PENDING" || ${status} == "IN_PROGRESS" ]] && [[ ${SECONDS} -ge ${endTime} ]]; then - echo "Polling timeout reached for waiting for finishing of the Sonar scan! Aborting the check for SonarQube Server's Quality Gate." + echo "Polling timeout reached for waiting for finishing of the Sonar scan! Aborting the check for SonarQube's Quality Gate." exit 1 fi @@ -77,6 +77,6 @@ elif [[ ${qualityGateStatus} == "ERROR" ]]; then fail "Quality Gate has FAILED.${reset}\n\n${analysisResultMsg}" else set_output "quality-gate-status" "FAILED" - fail "Quality Gate not set for the project. Please configure the Quality Gate in SonarQube Server or remove sonarqube-quality-gate action from the workflow." + fail "Quality Gate not set for the project. Please configure the Quality Gate in SonarQube or remove sonarqube-quality-gate action from the workflow." fi diff --git a/test/check-quality-gate-test.bats b/test/check-quality-gate-test.bats index 45d5af2..49bf4f3 100755 --- a/test/check-quality-gate-test.bats +++ b/test/check-quality-gate-test.bats @@ -102,7 +102,7 @@ teardown() { [ "$status" -eq 1 ] [[ "${github_out_actual}" = "quality-gate-status=FAILED" ]] - [[ "$output" = *"Quality Gate not set for the project. Please configure the Quality Gate in SonarQube Server or remove sonarqube-quality-gate action from the workflow."* ]] + [[ "$output" = *"Quality Gate not set for the project. Please configure the Quality Gate in SonarQube or remove sonarqube-quality-gate action from the workflow."* ]] } @test "fail when polling timeout is reached" { @@ -119,7 +119,7 @@ teardown() { run script/check-quality-gate.sh metadata_tmp 5 [ "$status" -eq 1 ] - [[ "$output" = *"Polling timeout reached for waiting for finishing of the Sonar scan! Aborting the check for SonarQube Server's Quality Gate."* ]] + [[ "$output" = *"Polling timeout reached for waiting for finishing of the Sonar scan! Aborting the check for SonarQube's Quality Gate."* ]] } @test "fail when Quality Gate status WARN" {