diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 2f2d0c6..8d05156 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -18,36 +18,48 @@ jobs: uses: actions/checkout@v4.1.7 with: fetch-depth: 0 + - uses: hadolint/hadolint-action@v3.1.0 with: dockerfile: Dockerfile output-file: hadolint.out format: sonarqube no-fail: true + - name: Setup Python uses: actions/setup-python@v5 with: python-version: "${{ vars.PYTHON_VERSION }}" + - name: Setup Poetry run: curl -sSL https://install.python-poetry.org | python3 - + - name: Update PATH run: export PATH="/root/.local/bin:$PATH" + - name: Install dependencies run: /root/.local/bin/poetry install + - name: Lint run: | /root/.local/bin/poetry run pylint --fail-under=8 --recursive=yes --output-format=parseable --output=lintreport.txt . cat lintreport.txt + - name: Unit Test run: | /root/.local/bin/poetry run coverage run -m pytest -v --junitxml=testresults.xml /root/.local/bin/poetry run coverage xml - sed -i 's@${{ github.workspace }}@/github/workspace@g' coverage.xml + sed -i 's@${{ gitea.workspace }}@/github/workspace@g' coverage.xml + + # TEMPORARY - DISABLED DUE TO GITHUB > GITEA MIGRATION + # SONARQUBE CLOUD IS CURRENTLY TIGHTLY COUPLED TO GITHUB - name: SonarQube Cloud Scan uses: SonarSource/sonarqube-scan-action@v4.2.1 + continue-on-error: true env: # GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} + - name: Snyk Vulnerability Scan uses: snyk/actions/python-3.10@master continue-on-error: true # To make sure that SARIF upload gets called @@ -55,6 +67,7 @@ jobs: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: args: --sarif-file-output=snyk.sarif --all-projects + # - name: Upload result to GitHub Code Scanning # uses: github/codeql-action/upload-sarif@v3 # with: diff --git a/sonar-project.properties b/sonar-project.properties index 08f2552..3e02a4c 100644 --- a/sonar-project.properties +++ b/sonar-project.properties @@ -1,8 +1,8 @@ sonar.organization=luketainton -sonar.projectKey=luketainton_webexmemebot +sonar.projectKey=luketainton_webexmemebot2 sonar.projectName=webexmemebot sonar.projectVersion=0.1.0 -sonar.python.version=3.11 +sonar.python.version=3.13 sonar.python.coverage.reportPaths=coverage.xml sonar.python.pylint.reportPaths=lintreport.txt sonar.python.xunit.reportPath=testresults.xml