Skip to content

Sonar Analysis

Sonar Analysis #427

name: Sonar Analysis
on:
workflow_run:
workflows: ['CI/CD']
types: [completed]
jobs:
sonar-analysis:
runs-on: ubuntu-latest
if: ${{ github.event.workflow_run.conclusion == 'success' }}
steps:
- name: 'Restore workflow context'
uses: dawidd6/action-download-artifact@v2
with:
github_token: ${{ secrets.GITHUB_TOKEN }}
run_id: ${{ github.event.workflow_run.id }}
name: maven-build-test-workflow-context
- name: 'Extract workflow context'
run: tar -xf workflow.tar.zst
- name: 'Restore workflow context'
run: cat workflow.env >> "${GITHUB_ENV}"
- name: 'Commit Status: Set Workflow Status as Pending'
uses: myrotvorets/set-commit-status-action@1.1.6
with:
token: ${{ secrets.GITHUB_TOKEN }}
status: pending
# Should match `env.PR_HEADSHA` when triggered by `pull_request` event workflow,
# Avoids failure of ENV being unavailable if job fails early:
sha: ${{ github.event.workflow_run.head_sha }}
- name: Clone Repository
uses: actions/checkout@v3
with:
ref: ${{ github.event.workflow_run.head_branch }}
- name: Cache SonarCloud packages
uses: actions/cache@v3
with:
path: ~/.sonar/cache
key: ${{ runner.os }}-sonar
- name: Restore cli test results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-cli # hit - restore
restore-keys: cobigen-dep-${{ hashFiles('**/pom.xml') }} # restore at least maven dependencies
# Restore other parallel results as well - seems that for any reason I could not reuse caches incrementally... need to restore all caches
- name: Restore eclipse test results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-eclipse # hit - restore
- name: Restore core systemtest results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-core-systemtest # hit - restore
- name: Restore core template test results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-templates # hit - restore
- name: Restore core maven results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-maven # hit - restore
- name: Restore core plugin test results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-plugins # hit - restore
- name: Restore core cli test results
uses: actions/cache@v3
with:
path: |
**/*.exec
**/failsafe-reports/**/*
**/surefire-reports/**/*
key: Linux-11-jacoco-${{ github.sha }}-cli # hit - restore
- name: SonarCloud Analysis
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
run: |
git fetch --unshallow
mvn verify sonar:sonar -DskipTests
# - name: 'Comment on PR: Sonar Analysis Result'
# if: ${{ env.PR_NUMBER != '' }}
# uses: marocchino/sticky-pull-request-comment@v2
# with:
# number: ${{ env.PR_NUMBER }}
# header: preview-comment
# recreate: true
# message: |
# Sonar Analysis Results are available [here](${{ steps.preview.outputs.deploy-url }})! :tada:
# Built with commit: ${{ env.PR_HEADSHA }}
- name: 'Commit Status: Set workflow result status'
uses: myrotvorets/set-commit-status-action@1.1.6
# Always run this step regardless of job failing early:
if: ${{ always() }}
env:
DEPLOY_SUCCESS: Quality gate passed.
DEPLOY_FAILURE: Failed to pass the quality gate!
with:
token: ${{ secrets.GITHUB_TOKEN }}
status: ${{ job.status == 'success' && 'success' || 'failure' }}
sha: ${{ github.event.workflow_run.head_sha }}
description: ${{ job.status == 'success' && env.DEPLOY_SUCCESS || env.DEPLOY_FAILURE }}