diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml new file mode 100644 index 0000000..90e570b --- /dev/null +++ b/.github/workflows/sonarqube.yml @@ -0,0 +1,102 @@ +name: SonarQube + +on: + pull_request: + branches: + - master + - main + types: [opened, synchronize, reopened] + +jobs: + build: + name: Build and analyze + runs-on: ubuntu-latest + timeout-minutes: 20 + + steps: + - name: Set up JDK 17 + uses: actions/setup-java@v4 + with: + java-version: 17 + distribution: 'zulu' # Alternative distribution options are available. + + - uses: actions/checkout@v4 + with: + fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis + + - name: Setup .NET + uses: actions/setup-dotnet@v4 + with: + dotnet-version: '8.0.x' # .NET 8 SDK supports building .NET Framework 4.7.2 projects + + - name: Install SonarQube Cloud scanner + run: | + mkdir -p ~/.sonar/scanner + dotnet tool install dotnet-sonarscanner --tool-path ~/.sonar/scanner + + - name: Restore dependencies + run: dotnet restore --verbosity normal + working-directory: Source/AIImages + + - name: Build and analyze + env: + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + run: | + echo "Starting SonarQube analysis..." + echo "Current directory: $(pwd)" + echo "Listing files:" + ls -la + echo "Starting SonarQube scanner..." + + ~/.sonar/scanner/dotnet-sonarscanner begin \ + /k:"AIImages" \ + /d:sonar.token="${{ secrets.SONAR_TOKEN }}" \ + /d:sonar.host.url="${{ secrets.SONAR_HOST_URL }}" \ + /d:sonar.cs.opencover.reportsPaths="**/coverage.opencover.xml" \ + /d:sonar.coverage.exclusions="**/obj/**,**/bin/**,**/Assemblies/**" \ + /d:sonar.exclusions="**/obj/**,**/bin/**,**/Assemblies/**,**/Migrations/**" \ + /d:sonar.cpd.exclusions="**/obj/**,**/bin/**" \ + /d:sonar.test.inclusions="**/*Tests.cs,**/*Test.cs" \ + /d:sonar.sources="Source" \ + /d:sonar.sourceEncoding=UTF-8 + + echo "Building project..." + cd Source/AIImages + dotnet build --verbosity normal --no-incremental -c Release + + echo "Running tests with coverage (if any)..." + dotnet test /p:CollectCoverage=true /p:CoverletOutputFormat=opencover /p:CoverletOutput=./coverage/ /p:Exclude="[*.Tests]*" || echo "No tests found, skipping test execution" + + echo "Ending SonarQube analysis..." + cd ../.. + ~/.sonar/scanner/dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}" + + - name: Wait for Quality Gate + run: | + echo "Waiting for SonarQube Quality Gate result..." + sleep 10 + + # Get Quality Gate status using jq for proper JSON parsing + RESPONSE=$(curl -s -u "${{ secrets.SONAR_TOKEN }}:" \ + "${{ secrets.SONAR_HOST_URL }}/api/qualitygates/project_status?projectKey=Mrleo1nid.aiimages") + + echo "API Response: $RESPONSE" + + # Install jq if not available + if ! command -v jq &> /dev/null; then + sudo apt-get update && sudo apt-get install -y jq + fi + + QUALITY_GATE_STATUS=$(echo "$RESPONSE" | jq -r '.projectStatus.status') + + echo "Quality Gate Status: $QUALITY_GATE_STATUS" + + if [ "$QUALITY_GATE_STATUS" != "OK" ]; then + echo "❌ Quality Gate failed! Status: $QUALITY_GATE_STATUS" + echo "Please check the SonarQube dashboard for details:" + echo "${{ secrets.SONAR_HOST_URL }}/dashboard?id=Mrleo1nid.aiimages" + exit 1 + else + echo "✅ Quality Gate passed!" + fi +