From 21a298cefa13950f11f88b5d3fc62a2c68a53550 Mon Sep 17 00:00:00 2001 From: Vinay Satish Date: Thu, 6 Apr 2023 10:30:06 +0530 Subject: Adding files for onboarding the project to SonarQubes Signed-off-by: Vinay Satish --- .github/workflows/sonarqube.yml | 25 +++++++++++++++++++++++++ sonar-project.properties | 1 + 2 files changed, 26 insertions(+) create mode 100644 .github/workflows/sonarqube.yml create mode 100644 sonar-project.properties diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml new file mode 100644 index 00000000..2b8136f4 --- /dev/null +++ b/.github/workflows/sonarqube.yml @@ -0,0 +1,25 @@ +name: SonarQube scan + +on: + # Trigger analysis when pushing to your main branches, and when creating a pull request. + push: + branches: + - main + - develop + - 'release/**' + pull_request: + types: [opened, synchronize, reopened] + +jobs: + sonarqube: + runs-on: ip-range-controlled + steps: + - uses: actions/checkout@v3 + with: + # Disabling shallow clone is recommended for improving relevancy of reporting + fetch-depth: 0 + - name: SonarQube Scan + uses: sonarsource/sonarqube-scan-action@master + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 00000000..d799a625 --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1 @@ +sonar.projectKey=chef_ohai_AYaDmOkGJ4YHsO5MtF7H \ No newline at end of file -- cgit v1.2.1