Extend support for ES 6.0, 6.1, 6.2, 6.3 as a source #1925
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: SonarQube Analysis | |
| on: | |
| push: | |
| pull_request: | |
| env: | |
| java-version: '17' | |
| gradle-version: '8.12.1' | |
| jobs: | |
| sonar: | |
| name: Run SonarQube Analysis | |
| runs-on: ubuntu-latest | |
| services: | |
| sonarqube: | |
| image: sonarqube | |
| ports: | |
| - 9000:9000 | |
| options: >- | |
| --health-cmd="curl -s -u admin:admin http://localhost:9000/api/system/health | grep -o GREEN" | |
| --health-interval=10s | |
| --health-timeout=10s | |
| --health-retries=60 | |
| env: | |
| SONAR_ES_BOOTSTRAP_CHECKS_DISABLE: "true" | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-java@v4 | |
| with: | |
| distribution: 'corretto' | |
| java-version: | | |
| 17 | |
| - name: Cache SonarQube Scanner | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.sonar/cache | |
| key: sonar-cache | |
| restore-keys: sonar-cache | |
| - uses: gradle/actions/setup-gradle@v4 | |
| with: | |
| gradle-version: 8.12.1 | |
| gradle-home-cache-cleanup: true | |
| - name: Generate SonarQube Token | |
| run: | | |
| echo "Generating a SonarQube token..." | |
| RESPONSE=$(curl -s -X POST -u "admin:admin" "http://localhost:9000/api/user_tokens/generate" \ | |
| -d "name=github-action-token" -d "type=GLOBAL_ANALYSIS_TOKEN") | |
| SONAR_TOKEN=$(echo "$RESPONSE" | jq -r '.token') | |
| if [ "$SONAR_TOKEN" == "null" ]; then | |
| echo "❌ Failed to generate SonarQube token!" | |
| exit 1 | |
| fi | |
| echo "::add-mask::$SONAR_TOKEN" | |
| echo "SONAR_TOKEN=$SONAR_TOKEN" >> $GITHUB_ENV | |
| - name: Run Gradle Build | |
| run: gradle copyDependencies | |
| - name: Run SonarQube Scanner | |
| run: | | |
| curl -sLo sonar-scanner-cli.zip https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-6.2.1.4610-linux-x64.zip | |
| unzip -q sonar-scanner-cli.zip -d $HOME | |
| export PATH="$HOME/sonar-scanner-6.2.1.4610-linux-x64/bin:$PATH" | |
| sonar-scanner \ | |
| -Dsonar.projectKey=local_project \ | |
| -Dsonar.sources=. \ | |
| -Dsonar.host.url=http://localhost:9000 \ | |
| -Dsonar.login=$SONAR_TOKEN | |
| - name: Wait for issues to be processed | |
| run: sleep 60 | |
| - name: Collect issues from the server | |
| run: | | |
| curl -s -u "$SONAR_TOKEN:" "http://localhost:9000/api/issues/search?componentKeys=local_project" -o issues.json | |
| echo "::group::SonarQube Issues" | |
| jq -r '.issues[] | "File: \(.component):\(.line), Rule: \(.rule), Message: \(.message)"' issues.json | sort | |
| echo "::endgroup::" | |
| # Annotate issue on the PR with newest first | |
| jq -c '.issues | sort_by(.creationDate) | reverse | .[]' issues.json | while read -r issue; do | |
| FILE=$(echo "$issue" | jq -r '.component | split(":")[1]') | |
| LINE=$(echo "$issue" | jq -r '.line') | |
| MESSAGE=$(echo "$issue" | jq -r '.message') | |
| RULE=$(echo "$issue" | jq -r '.rule') | |
| echo "::error file=$FILE,line=$LINE,title=$RULE::$MESSAGE" | |
| done | |
| ISSUE_COUNT=$(jq '.issues | length' issues.json) | |
| BASELINE_ISSUE_COUNT=20 # Baseline issue count | |
| if [ "$ISSUE_COUNT" -gt "$BASELINE_ISSUE_COUNT" ]; then | |
| echo "❌ Build failed: Found $ISSUE_COUNT issues, which is more than the baseline of $BASELINE_ISSUE_COUNT." | |
| exit 1 | |
| else | |
| echo "✅ Build passed: Found $ISSUE_COUNT issues, which is within the baseline of $BASELINE_ISSUE_COUNT." | |
| fi | |
| - name: Upload SonarQube Artifacts | |
| if: always() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: sonar-reports | |
| path: issues.json |