go-hibp/.github/workflows/sonarqube.yml

41 lines
1.1 KiB
YAML
Raw Normal View History

2022-04-12 20:06:32 +02:00
name: SonarQube
on:
push:
branches:
- main # or the name of your main branch
2022-05-07 14:57:14 +02:00
env:
HIBP_API_KEY: ${{ secrets.HIBP_API_KEY }}
2022-04-12 20:06:32 +02:00
jobs:
build:
name: Build
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
with:
fetch-depth: 0
2022-04-13 09:43:27 +02:00
- name: Setup Go
uses: actions/setup-go@v2.1.3
with:
go-version: 1.22.x
2022-04-13 09:43:27 +02:00
- name: Run unit Tests
run: |
go test -v -race --coverprofile=./cov.out .
2022-04-13 09:43:27 +02:00
- name: Run Gosec Security Scanner
uses: securego/gosec@master
with:
args: '-no-fail -fmt sonarqube -out report.json .'
2022-04-13 09:43:27 +02:00
2022-04-12 20:06:32 +02:00
- uses: sonarsource/sonarqube-scan-action@master
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
# If you wish to fail your job when the Quality Gate is red, uncomment the
# following lines. This would typically be used to fail a deployment.
- uses: sonarsource/sonarqube-quality-gate-action@master
timeout-minutes: 5
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}