Update .gitea/workflows/ci.yml
This commit is contained in:
@ -16,18 +16,27 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
- uses: hadolint/hadolint-action@v3.1.0
|
- name: Run Hadolint
|
||||||
|
uses: hadolint/hadolint-action@v3.1.0
|
||||||
with:
|
with:
|
||||||
dockerfile: Dockerfile
|
dockerfile: Dockerfile
|
||||||
output-file: hadolint.out
|
output-file: hadolint.out
|
||||||
format: sonarqube
|
format: sonarqube
|
||||||
no-fail: true
|
no-fail: true
|
||||||
|
|
||||||
- name: SonarQube Scan
|
# - name: SonarQube Scan
|
||||||
uses: SonarSource/sonarqube-scan-action@v5.2.0
|
# uses: SonarSource/sonarqube-scan-action@v5.2.0
|
||||||
|
# env:
|
||||||
|
# SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
|
||||||
|
# SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
|
||||||
|
|
||||||
|
- name: Snyk SAST Scan
|
||||||
|
uses: snyk/actions/python@master
|
||||||
env:
|
env:
|
||||||
SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|
||||||
SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
|
with:
|
||||||
|
# command: snyk
|
||||||
|
args: snyk code test --all-projects --exclude=.archive
|
||||||
|
|
||||||
- name: Snyk Vulnerability Scan
|
- name: Snyk Vulnerability Scan
|
||||||
uses: snyk/actions/python@master
|
uses: snyk/actions/python@master
|
||||||
|
Reference in New Issue
Block a user