Skip to content

chore(deps): lock file maintenance #130

chore(deps): lock file maintenance

chore(deps): lock file maintenance #130

Workflow file for this run

name: SonarCloud Analysis
on:
push:
branches:
- master
pull_request:
branches:
- master
workflow_dispatch:
permissions:
contents: read
env:
NPM_CONFIG_FUND: '0'
NPM_CONFIG_AUDIT: '0'
SUPPRESS_SUPPORT: '1'
NO_UPDATE_NOTIFIER: 'true'
SONARSCANNER: 'true'
jobs:
build:
name: SonarCloud Scan
runs-on: ubuntu-latest
permissions:
contents: read
if: |
github.event_name != 'pull_request' ||
github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
steps:
- name: Harden Runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
github.com:443
npm.pkg.github.com:443
objects.githubusercontent.com:443
registry.npmjs.org:443
api.sonarcloud.io:443
analysis-sensorcache-eu-central-1-prod.s3.amazonaws.com:443
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.com:443
scanner.sonarcloud.io:443
sonarcloud.io:443
- name: Check out the source code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
- name: Set up Node.js environment
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
with:
node-version: lts/*
cache: npm
- name: Install dependencies
run: npm ci
- name: Run tests
run: npm run test:sonarqube
continue-on-error: true
- name: Grab info
id: info
run: |
echo "packageName=$(jq -r .name package.json)" >> "${GITHUB_OUTPUT}"
echo "packageVersion=$(jq -r .version package.json)" >> "${GITHUB_OUTPUT}"
- name: SonarCloud Scan
uses: SonarSource/sonarcloud-github-action@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838 # v3.1.0
env:
GITHUB_TOKEN: ${{ github.token }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
with:
args: >
-Dsonar.projectName=${{ steps.info.outputs.packageName }}
-Dsonar.projectVersion=${{ steps.info.outputs.packageVersion }}
-Dsonar.links.homepage=${{ github.event.repository.homepage }}
-Dsonar.links.issue=${{ github.event.repository.html_url }}/issues
-Dsonar.links.scm=${{ github.repositoryUrl }}
-Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
-Dsonar.testExecutionReportPaths=test-report.xml