101 lines
3.5 KiB
YAML
101 lines
3.5 KiB
YAML
name: SonarQube Analysis
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- '*'
|
|
|
|
jobs:
|
|
build:
|
|
name: Build and analyze
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 20
|
|
|
|
steps:
|
|
- name: Set up JDK 17
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
java-version: 17
|
|
distribution: 'zulu' # Alternative distribution options are available.
|
|
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
|
|
|
|
- name: Setup .NET
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: '8.0.x' # .NET 8 SDK supports building .NET Framework 4.7.2 projects
|
|
|
|
- name: Install SonarQube Cloud scanner
|
|
run: |
|
|
mkdir -p ~/.sonar/scanner
|
|
dotnet tool install dotnet-sonarscanner --tool-path ~/.sonar/scanner
|
|
|
|
- name: Restore dependencies
|
|
run: dotnet restore --verbosity normal
|
|
working-directory: Source/AIImages
|
|
|
|
- name: Build and analyze
|
|
env:
|
|
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
|
|
run: |
|
|
echo "Starting SonarQube analysis..."
|
|
echo "Current directory: $(pwd)"
|
|
echo "Listing files:"
|
|
ls -la
|
|
echo "Starting SonarQube scanner..."
|
|
|
|
~/.sonar/scanner/dotnet-sonarscanner begin \
|
|
/k:"AIImages" \
|
|
/d:sonar.token="${{ secrets.SONAR_TOKEN }}" \
|
|
/d:sonar.host.url="${{ secrets.SONAR_HOST_URL }}" \
|
|
/d:sonar.cs.opencover.reportsPaths="**/coverage.opencover.xml" \
|
|
/d:sonar.coverage.exclusions="**/obj/**,**/bin/**,**/Assemblies/**" \
|
|
/d:sonar.exclusions="**/obj/**,**/bin/**,**/Assemblies/**,**/Migrations/**" \
|
|
/d:sonar.cpd.exclusions="**/obj/**,**/bin/**" \
|
|
/d:sonar.test.inclusions="**/*Tests.cs,**/*Test.cs" \
|
|
/d:sonar.sources="Source" \
|
|
/d:sonar.sourceEncoding=UTF-8
|
|
|
|
echo "Building project..."
|
|
cd Source/AIImages
|
|
dotnet build --verbosity normal --no-incremental -c Release
|
|
|
|
echo "Running tests with coverage (if any)..."
|
|
dotnet test /p:CollectCoverage=true /p:CoverletOutputFormat=opencover /p:CoverletOutput=./coverage/ /p:Exclude="[*.Tests]*" || echo "No tests found, skipping test execution"
|
|
|
|
echo "Ending SonarQube analysis..."
|
|
cd ../..
|
|
~/.sonar/scanner/dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}"
|
|
|
|
- name: Wait for Quality Gate
|
|
run: |
|
|
echo "Waiting for SonarQube Quality Gate result..."
|
|
sleep 10
|
|
|
|
# Get Quality Gate status using jq for proper JSON parsing
|
|
RESPONSE=$(curl -s -u "${{ secrets.SONAR_TOKEN }}:" \
|
|
"${{ secrets.SONAR_HOST_URL }}/api/qualitygates/project_status?projectKey=AIImages")
|
|
|
|
echo "API Response: $RESPONSE"
|
|
|
|
# Install jq if not available
|
|
if ! command -v jq &> /dev/null; then
|
|
sudo apt-get update && sudo apt-get install -y jq
|
|
fi
|
|
|
|
QUALITY_GATE_STATUS=$(echo "$RESPONSE" | jq -r '.projectStatus.status')
|
|
|
|
echo "Quality Gate Status: $QUALITY_GATE_STATUS"
|
|
|
|
if [ "$QUALITY_GATE_STATUS" != "OK" ]; then
|
|
echo "❌ Quality Gate failed! Status: $QUALITY_GATE_STATUS"
|
|
echo "Please check the SonarQube dashboard for details:"
|
|
echo "${{ secrets.SONAR_HOST_URL }}/dashboard?id=AIImages"
|
|
exit 1
|
|
else
|
|
echo "✅ Quality Gate passed!"
|
|
fi
|
|
|