From f4af72eb7263e90ccd4f91c61a14a4ea77eb4994 Mon Sep 17 00:00:00 2001 From: Syndamia Date: Tue, 13 Aug 2024 15:56:13 +0300 Subject: feat(ci): Added SonarCloud testing --- .github/workflows/ci.yml | 17 ++++++++++++++--- sonar-project.properties | 2 ++ 2 files changed, 16 insertions(+), 3 deletions(-) create mode 100644 sonar-project.properties diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0765ada..e538dab 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: name: source-code path: . - SAST-Unit-tests: + Unit-tests: runs-on: ubuntu-latest needs: Clone-repo steps: @@ -25,7 +25,7 @@ jobs: path: . - run: make tests - SAST-clang: + clang-analysis: runs-on: ubuntu-latest needs: Clone-repo steps: @@ -46,9 +46,20 @@ jobs: - run: sudo apt-get install -y flawfinder - run: make security-analysis + SAST-SonarCloud: + runs-on: ubuntu-latest + steps: + - uses: actions/download-artifact@v3 + with: + name: source-code + path: . + - uses: SonarSource/sonarcloud-github-action@master + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + Build: runs-on: ubuntu-latest - needs: [ SAST-Unit-tests, SAST-clang, SAST-flawfinder ] + needs: [ Unit-tests, clang-analysis, SAST-flawfinder, SAST-SonarCloud ] steps: - uses: actions/download-artifact@v3 with: diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 0000000..f08af7a --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1,2 @@ +sonar.organization=syndamia +sonar.projectKey=Syndamia_pico-web -- cgit v1.2.3