From 523bb61e7b18d760e548551770f5dca0af859b28 Mon Sep 17 00:00:00 2001 From: hktalent <18223385+hktalent@users.noreply.github.com> Date: Mon, 30 Oct 2023 17:35:33 +0800 Subject: [PATCH] up 2023-10-30 --- .github/workflows/build.yml | 2 +- .github/workflows/codeql-analysis.yml | 39 --------------------------- .github/workflows/sonarcloud.yml | 38 -------------------------- 3 files changed, 1 insertion(+), 78 deletions(-) delete mode 100644 .github/workflows/codeql-analysis.yml delete mode 100644 .github/workflows/sonarcloud.yml diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index cfc4d4e10..b2ecacd42 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -1,4 +1,4 @@ -name: 🎉 Release Binary +name: Release Binary on: create: tags: diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml deleted file mode 100644 index e6b6a9c93..000000000 --- a/.github/workflows/codeql-analysis.yml +++ /dev/null @@ -1,39 +0,0 @@ -name: 🚨 CodeQL Analysis - -on: - workflow_dispatch: - push: - pull_request: - branches: - - dev - -jobs: - analyze: - name: Analyze - runs-on: ubuntu-latest - permissions: - actions: read - contents: read - security-events: write - - strategy: - fail-fast: false - matrix: - language: [ 'go' ] - # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ] - - steps: - - name: Checkout repository - uses: actions/checkout@v3 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v2 - with: - languages: ${{ matrix.language }} - - - name: Autobuild - uses: github/codeql-action/autobuild@v2 - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml deleted file mode 100644 index beb30683a..000000000 --- a/.github/workflows/sonarcloud.yml +++ /dev/null @@ -1,38 +0,0 @@ -name: 👮🏼‍♂️ Sonarcloud - -on: - pull_request: - paths: - - '**.go' - workflow_dispatch: - -jobs: - sonarcloud: - name: SonarCloud - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 - with: - fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - - - name: "Set up Go" - uses: actions/setup-go@v3 - with: - go-version: 1.21.3 - - - name: Run unit Tests - working-directory: v2/ - run: | - go test -coverprofile=cov.out ./... - - - name: Run Gosec Security Scanner - working-directory: v2/ - run: | - go install github.com/securego/gosec/cmd/gosec@latest - gosec -no-fail -fmt=sonarqube -out report.json ./... - - - name: SonarCloud Scan - uses: SonarSource/sonarcloud-github-action@master - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} \ No newline at end of file