diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml new file mode 100644 index 0000000..71f6c9e --- /dev/null +++ b/.github/workflows/sonarcloud.yml @@ -0,0 +1,50 @@ +name: Run SonarCloud Analysis +on: + workflow_dispatch: + pull_request: + branches: + - main + paths: + - "lib/**" + - "index.js" + - ".github/workflows/sonarcloud.yml" + + push: + branches: + - main + paths: + - "lib/**" + - "index.js" + - ".github/workflows/sonarcloud.yml" + +permissions: + pull-requests: read # allows SonarCloud to decorate PRs with analysis results + +jobs: + SonarCloudAnalysis-Watcher: + name: SonarCloud Analysis Watcher + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v3 + with: + fetch-depth: 0 # Important to fetch all history for accurate blame information + - name: Analyze Watcher with SonarCloud + uses: SonarSource/sonarcloud-github-action@v2.0.2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_WATCHER }} # Needed to push to SonarCloud + with: + # Additional arguments for the sonarcloud scanner + args: -Dsonar.projectKey=NUWCDIVNPT_stigman-watcher + -Dsonar.projectName=NUWCDIVNPT_stigman-watcher + -Dsonar.organization=nuwcdivnpt + -Dsonar.inclusions=**/*.js + -Dsonar.exclusions=**/node_modules/**, + + + # This will fail the action if Quality Gate fails (leaving out for now ) + # - name: Check Quality Gate + # uses: sonarsource/sonarqube-quality-gate-action@master + # env: + # SONAR_TOKEN: