Merge pull request #4 from Shobika/test

New change
This commit is contained in:
Shobika 2022-02-22 10:51:00 -05:00 committed by GitHub
commit b21609b554
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 18 deletions

View File

@ -1,28 +1,21 @@
name: Build
on: on:
# Trigger analysis when pushing in master or pull requests, and when creating
# a pull request.
push: push:
branches: branches:
- master - master
- test
pull_request: pull_request:
types: [opened, synchronize, reopened] types: [opened, synchronize, reopened]
name: Main Workflow
jobs: jobs:
sonarqube: sonarcloud:
name: SonarCloud
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v2
with: with:
# Disabling shallow clone is recommended for improving relevancy of reporting fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
fetch-depth: 0 - name: SonarCloud Scan
- name: SonarQube Scan uses: SonarSource/sonarcloud-github-action@master
uses: sonarsource/sonarqube-scan-action@master
env: env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
- name: SonarQube Quality Gate check
uses: sonarsource/sonarqube-quality-gate-action@master
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

View File

@ -1 +1,2 @@
sonar.projectKey=VulnAppStatusCheck sonar.projectKey=Shobika_Vulnerable-Web-Application
sonar.organization=shobika