switcher-gitops/.github/workflows/sonar.yml at master · switcherapi/switcher-gitops · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
name: Manual SonarCloud Analysis

on:
  workflow_dispatch:
    inputs:
      pr_id:
        description: 'Pull Request ID to analyze'
        required: true
        type: string

jobs:
  sonar-analysis:
    name: SonarCloud Analysis for PR
    runs-on: ubuntu-latest

    steps:
      - name: Get PR details
        id: pr
        uses: actions/github-script@v7
        with:
          script: |
            const pr = await github.rest.pulls.get({
              owner: context.repo.owner,
              repo: context.repo.repo,
              pull_number: ${{ inputs.pr_id }}
            });
            core.setOutput('head_ref', pr.data.head.ref);
            core.setOutput('base_ref', pr.data.base.ref);
            core.setOutput('head_sha', pr.data.head.sha);

      - uses: actions/checkout@v6
        with:
          ref: ${{ steps.pr.outputs.head_sha }}
          fetch-depth: 0

      - name: Set up Go 1.26.2
        uses: actions/setup-go@v6
        with:
          go-version: '1.26.2'

      - name: Start MongoDB
        uses: supercharge/mongodb-github-action@1.12.1
        with:
          mongodb-version: 8.0

      - name: Build
        run: go build -v ./...

      - name: Test
        run: go test -p 1 -v ./... -coverprofile="coverage.out"
        env:
          GO_ENV: test
          MONGODB_URI: mongodb://127.0.0.1:27017
          MONGO_DB: switcher-gitops-test
          GIT_TOKEN_PRIVATE_KEY: ${{ secrets.GIT_TOKEN_PRIVATE_KEY }}
          GIT_USER: ${{ secrets.GIT_USER }}
          GIT_TOKEN: ${{ secrets.GIT_TOKEN }}
          GIT_TOKEN_READ_ONLY: ${{ secrets.GIT_TOKEN_READ_ONLY }}
          GIT_REPO_URL: ${{ secrets.GIT_REPO_URL }}
          GIT_BRANCH: ${{ secrets.GIT_BRANCH }}

      - name: SonarCloud Scan
        uses: sonarsource/sonarqube-scan-action@v7.0.0
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        if: env.SONAR_TOKEN != ''
        with:
          args: >
            -Dsonar.pullrequest.key=${{ inputs.pr_id }}
            -Dsonar.pullrequest.branch=${{ steps.pr.outputs.head_ref }}
            -Dsonar.pullrequest.base=${{ steps.pr.outputs.base_ref }}