diff options
-rw-r--r-- | .github/workflows/sonarqube.yml | 25 | ||||
-rw-r--r-- | sonar-project.properties | 1 |
2 files changed, 26 insertions, 0 deletions
diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml new file mode 100644 index 00000000..2b8136f4 --- /dev/null +++ b/.github/workflows/sonarqube.yml @@ -0,0 +1,25 @@ +name: SonarQube scan + +on: + # Trigger analysis when pushing to your main branches, and when creating a pull request. + push: + branches: + - main + - develop + - 'release/**' + pull_request: + types: [opened, synchronize, reopened] + +jobs: + sonarqube: + runs-on: ip-range-controlled + steps: + - uses: actions/checkout@v3 + with: + # Disabling shallow clone is recommended for improving relevancy of reporting + fetch-depth: 0 + - name: SonarQube Scan + uses: sonarsource/sonarqube-scan-action@master + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 00000000..d799a625 --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1 @@ +sonar.projectKey=chef_ohai_AYaDmOkGJ4YHsO5MtF7H
\ No newline at end of file |