Skip to content

netspective/sonar-scan-action

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 

Repository files navigation

You can add 2 workflows one for Develop and another one for Production.

Add secrets from GitHub repository settings. Secret name is same as given in the yml file. ex: SONARQUBE_HOST

Must required secrets are SONARQUBE_HOST and SONARQUBE_TOKEN

  • SONARQUBE_HOST - (Required) SonarQube URL.
  • SONARQUBE_TOKEN - (Required) Authentication token of a SonarQube user. Please see how to generate SonarQube token.
  • SCANNER_OPTIONS - Please set this to "-Xmx3000m" to avoid heap memory issue. We can increase this upto 6000m. Please GitHub runner hardware resources here
  • password - using with the login username. Left blank if you are using authentication token.

projectVersion is an input parameter not a secret.

  • projectVersion - (Required) The version we can give as input before building the workflow. example 1.1. Increase this value on each build like 1.2,1.3,1.4,...etc.

Please see entrypoint.sh file for more options.

vim .github/workflows/devl.workflow.yml

on: 
  workflow_dispatch:
    inputs:
      projectVersion:
        description: 'Version'
        required: true
name: Development
jobs:
  sonarQubeTrigger:
    name: SonarQube Trigger
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@master
    - name: SonarQube Scan
      uses: netspective/sonar-scan-action@master
      with:
        host: ${{ secrets.SONARQUBE_HOST }}
        login: ${{ secrets.SONARQUBE_TOKEN }}
        scannerOptions: ${{ secrets.SCANNER_OPTIONS }}
        exclusions: ${{ secrets.SONAR_EXCLUSIONS }}
        projectKey: "**Develop**"
        projectName: "**Develop**"
        projectVersion: ${{ github.event.inputs.projectVersion }}

vim .github/workflows/prod.workflow.yml

on: 
  workflow_dispatch:
    inputs:
      projectVersion:
        description: 'Version'
        required: true
name: Production
jobs:
  sonarQubeTrigger:
    name: SonarQube Trigger
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@master
    - name: SonarQube Scan
      uses: netspective/sonar-scan-action@master
      with:
        host: ${{ secrets.SONARQUBE_HOST }}
        login: ${{ secrets.SONARQUBE_TOKEN }}
        scannerOptions: ${{ secrets.SCANNER_OPTIONS }}
        exclusions: ${{ secrets.SONAR_EXCLUSIONS }}
        projectVersion: ${{ github.event.inputs.projectVersion }}        

About

Custom action developed to execute sonar scan

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published