diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index f99f61e..58e80a8 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -11,6 +11,21 @@ jobs: - uses: actions/checkout@v2 with: fetch-depth: 0 + + - name: Setup Go + uses: actions/setup-go@v2.1.3 + with: + go-version: 1.18.x + + - name: Run unit Tests + run: | + go test -v -race --coverprofile=./cov.out ./... + + - name: Run Gosec Security Scanner + uses: securego/gosec@master + with: + args: '-no-fail -fmt sonarqube -out report.json ./...' + - uses: sonarsource/sonarqube-scan-action@master env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}