chore(ci): update CI workflows to comment out SonarQube and Snyk scans

This commit is contained in:
2026-01-21 21:08:49 +00:00
parent 9a93c7beb5
commit 5d458cbc6b
12 changed files with 243 additions and 200 deletions

View File

@@ -6,11 +6,11 @@ on:
type: string
default: "3.11"
description: "Version of Python to use for testing environment"
secrets:
SONAR_TOKEN:
required: true
SNYK_TOKEN:
required: true
# secrets:
# SONAR_TOKEN:
# required: true
# SNYK_TOKEN:
# required: true
env:
PATH: ${{ env.PATH }}:/root/.poetry/bin
@@ -65,15 +65,15 @@ jobs:
poetry run coverage xml
sed -i 's@${{ gitea.workspace }}@/github/workspace@g' coverage.xml
- name: SonarQube Cloud Scan
uses: SonarSource/sonarqube-scan-action@v7.0.0
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
# - name: SonarQube Cloud Scan
# uses: SonarSource/sonarqube-scan-action@v7.0.0
# env:
# SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
- name: Snyk Vulnerability Scan
uses: snyk/actions/python@master
continue-on-error: true # Sometimes vulns aren't immediately fixable
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
args: test --all-projects
# - name: Snyk Vulnerability Scan
# uses: snyk/actions/python@master
# continue-on-error: true # Sometimes vulns aren't immediately fixable
# env:
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
# with:
# args: test --all-projects