diff --git a/.deepsource.toml b/.deepsource.toml index 9456cfc..94edaee 100644 --- a/.deepsource.toml +++ b/.deepsource.toml @@ -1,8 +1,5 @@ version = 1 -[[analyzers]] -name = "shell" - [[analyzers]] name = "test-coverage" @@ -13,4 +10,4 @@ name = "secrets" name = "docker" [[analyzers]] -name = "csharp" \ No newline at end of file +name = "csharp" diff --git a/.github/workflows/infisical-secrets-check.yml b/.github/workflows/infisical-secrets-check.yml index dd1ce4f..919f325 100644 --- a/.github/workflows/infisical-secrets-check.yml +++ b/.github/workflows/infisical-secrets-check.yml @@ -23,4 +23,4 @@ jobs: fetch-depth: 0 - name: Infisical secrets check - uses: guibranco/github-infisical-secrets-check-action@v1.1.20 + uses: guibranco/github-infisical-secrets-check-action@v1.1.21 diff --git a/.github/workflows/sonar-cloud.yml b/.github/workflows/sonar-cloud.yml new file mode 100644 index 0000000..ba08190 --- /dev/null +++ b/.github/workflows/sonar-cloud.yml @@ -0,0 +1,66 @@ +name: SonarCloud Analysis + +on: + push: + branches: + - main + pull_request: + types: [opened, synchronize, reopened] + +jobs: + SonarCloudAnalysis: + name: SonarCloud Analysis + runs-on: ubuntu-latest + + steps: + - name: Set up Java + uses: actions/setup-java@v4 + with: + distribution: 'temurin' + java-version: 21 + + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Setup .NET + uses: actions/setup-dotnet@v4 + with: + dotnet-version: '9.0.x' + + - name: Cache SonarCloud packages + uses: actions/cache@v4 + with: + path: ~/.sonar/cache + key: ${{ runner.os }}-sonar + restore-keys: ${{ runner.os }}-sonar + + - name: Cache SonarCloud scanner + id: cache-sonar-scanner + uses: actions/cache@v4 + with: + path: ~/.sonar/cache + key: ${{ runner.os }}-sonar-scanner + restore-keys: ${{ runner.os }}-sonar-scanner + + - name: Install SonarCloud scanner + if: steps.cache-sonar-scanner.outputs.cache-hit != 'true' + run: dotnet tool update dotnet-sonarscanner --tool-path ~/.sonar/cache/ + + - name: Set SonarCloud variables + shell: bash + run: | + KEY="${{ github.repository_owner }}_${{ github.event.repository.name }}" + ORG="${{ github.repository_owner }}" + echo "KEY=${KEY}" >> "${GITHUB_ENV}" # Keep the variable KEY as it + echo "ORG=${ORG@L}" >> "${GITHUB_ENV}" # Lowercase the ORG variable + + - name: Build and analyze + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + run: | + ~/.sonar/cache/dotnet-sonarscanner begin /k:"${{ env.KEY }}" /o:"${{ env.ORG }}" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.scanner.scanAll=false /d:sonar.cs.opencover.reportsPaths="Tests/**/coverage.net8.0.opencover.xml" + dotnet build -c Release --verbosity minimal + dotnet test -c Release --verbosity minimal --no-build --no-restore /p:CollectCoverage=true /p:CoverletOutputFormat="opencover" + ~/.sonar/cache/dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}"