ci:(deps): bump ossf/scorecard-action from ff5dd8929f96a8a4dc67d13f32b8c75057829621 to 62b2cac7ed8198b15735ed49ab1e5cf35480ba46 #15
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sonar Scan | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| - master | |
| - 'release/**' | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| sonar: | |
| name: Sonar Scan | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.26.2' | |
| - name: Install dependencies | |
| run: go mod download | |
| - name: Run tests with coverage | |
| run: | | |
| go test -v ./... \ | |
| -coverprofile=coverage.out \ | |
| -covermode=atomic \ | |
| -coverpkg=./... | |
| - name: Show coverage summary | |
| run: | | |
| go tool cover -func=coverage.out | |
| - name: Sonar Scan | |
| uses: SonarSource/sonarqube-scan-action@v6 | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} | |
| SONAR_ORGANIZATION: ${{ secrets.SONAR_ORGANIZATION }} | |
| # - name: Sonar Quality Gate | |
| # uses: SonarSource/sonarqube-quality-gate-action@v1.1.0 | |
| # timeout-minutes: 10 | |
| # env: | |
| # SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| # SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} |