chore(ci): update CI workflows to comment out SonarQube and Snyk scans (#57)
Reviewed-on: #57
This commit was merged in pull request #57.
This commit is contained in:
@@ -6,11 +6,11 @@ on:
|
||||
type: string
|
||||
default: "3.11"
|
||||
description: "Version of Python to use for testing environment"
|
||||
secrets:
|
||||
SONAR_TOKEN:
|
||||
required: true
|
||||
SNYK_TOKEN:
|
||||
required: true
|
||||
# secrets:
|
||||
# SONAR_TOKEN:
|
||||
# required: true
|
||||
# SNYK_TOKEN:
|
||||
# required: true
|
||||
|
||||
jobs:
|
||||
ci:
|
||||
@@ -57,15 +57,15 @@ jobs:
|
||||
coverage xml
|
||||
sed -i 's@${{ github.workspace }}@/github/workspace@g' coverage.xml
|
||||
|
||||
- name: SonarQube Cloud Scan
|
||||
uses: SonarSource/sonarqube-scan-action@v7.0.0
|
||||
env:
|
||||
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
|
||||
# - name: SonarQube Cloud Scan
|
||||
# uses: SonarSource/sonarqube-scan-action@v7.0.0
|
||||
# env:
|
||||
# SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
|
||||
|
||||
- name: Snyk Vulnerability Scan
|
||||
uses: snyk/actions/python@master
|
||||
continue-on-error: true # Sometimes vulns aren't immediately fixable
|
||||
env:
|
||||
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
with:
|
||||
args: test --all-projects
|
||||
# - name: Snyk Vulnerability Scan
|
||||
# uses: snyk/actions/python@master
|
||||
# continue-on-error: true # Sometimes vulns aren't immediately fixable
|
||||
# env:
|
||||
# SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||
# with:
|
||||
# args: test --all-projects
|
||||
|
||||
Reference in New Issue
Block a user