Merge pull request #2402 from GluuFederation/gluu-core-bom_issues_38 #281
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Please do not attempt to edit this flow without the direct consent from the DevOps team. This file is managed centrally. | |
| # Contact @moabu | |
| # Sonar cloud https://sonarcloud.io/organizations/janssenproject/projects | |
| name: Code quality check | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - main | |
| - "4.5" | |
| pull_request: | |
| branches: | |
| - master | |
| - main | |
| - "4.5" | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| env: | |
| JVM_PROJECTS: | | |
| GluuFederation/oxAuth | |
| GluuFederation/oxTrust | |
| GluuFederation/scim | |
| GluuFederation/oxShibboleth | |
| GluuFederation/fido2 | |
| GluuFederation/oxd | |
| GluuFederation/casa | |
| GluuFederation/gluu-opendj4 | |
| NON_JVM_PROJECTS: | | |
| GluuFederation/gluu-passport | |
| GluuFederation/gluu-admin-ui | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of sonarqube analysis | |
| - name: Set up JDK 11 | |
| if: contains(env.JVM_PROJECTS, github.repository) | |
| uses: actions/[email protected] | |
| with: | |
| java-version: 11 | |
| distribution: 'adopt' | |
| - name: Cache SonarCloud packages for JVM based project | |
| if: contains(env.JVM_PROJECTS, github.repository) | |
| uses: actions/[email protected] | |
| with: | |
| path: ~/.sonar/cache | |
| key: ${{ runner.os }}-sonar | |
| restore-keys: ${{ runner.os }}-sonar | |
| - name: Build and analyze JVM based project | |
| if: contains(env.JVM_PROJECTS, github.repository) | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| run: | | |
| case "$GITHUB_REPOSITORY" in | |
| "GluuFederation/gluu-opendj4") | |
| echo "Build opendj-sdk first for gluu-opendj4" | |
| mvn -B -f opendj-sdk/pom.xml -DskipTests clean install | |
| ;& | |
| "GluuFederation/oxAuth") | |
| ;& | |
| "GluuFederation/oxTrust") | |
| ;& | |
| "GluuFederation/scim") | |
| ;& | |
| "GluuFederation/casa") | |
| ;& | |
| "GluuFederation/oxd") | |
| echo "Run Sonar analysis without test execution" | |
| mvn -B -DskipTests=true install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar | |
| ;; | |
| *) | |
| echo "Run Sonar analysis with test execution" | |
| mvn -B install org.sonarsource.scanner.maven:sonar-maven-plugin:sonar | |
| ;; | |
| esac | |
| - name: Convert repo org name to lowercase for non JVM projects | |
| if: contains(env.NON_JVM_PROJECTS, github.repository) | |
| env: | |
| REPO_OWNER: ${{ github.repository_owner }} | |
| run: | | |
| echo "REPO_ORG=${REPO_OWNER,,}" >>${GITHUB_ENV} | |
| - name: SonarCloud Scan for non-JVM project | |
| if: contains(env.NON_JVM_PROJECTS, github.repository) | |
| uses: SonarSource/sonarcloud-github-action@master | |
| with: | |
| args: > | |
| -Dsonar.organization=${{ env.REPO_ORG }} | |
| -Dsonar.projectKey=${{ github.repository_owner }}_${{ github.event.repository.name }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} |