diff --git a/.gitea/workflows/check_code_in_sonarqube.yaml b/.gitea/workflows/check_code_in_sonarqube.yaml index 61c5e6d..93602fe 100644 --- a/.gitea/workflows/check_code_in_sonarqube.yaml +++ b/.gitea/workflows/check_code_in_sonarqube.yaml @@ -15,18 +15,38 @@ jobs: - name: Checking out uses: actions/checkout@v4 with: - # Disabling shallow clone is recommended for improving relevancy of reporting fetch-depth: 0 - # FIX: Add Java 17 setup before SonarQube scan - name: Set up JDK 17 uses: actions/setup-java@v3 with: java-version: '17' distribution: 'temurin' - - name: SonarQube Scan - uses: kitabisa/sonarqube-action@v1.2.0 + - name: Cache SonarQube packages + uses: actions/cache@v3 with: - host: ${{ secrets.SONARQUBE_HOST }} - login: ${{ secrets.SONARQUBE_TOKEN }} + path: ~/.sonar/cache + key: ${{ runner.os }}-sonar + restore-keys: ${{ runner.os }}-sonar + + - name: Download and setup SonarScanner + run: | + mkdir -p $HOME/.sonar + wget -q https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-5.0.1.3006-linux.zip + unzip -q sonar-scanner-cli-5.0.1.3006-linux.zip -d $HOME/.sonar/ + echo "$HOME/.sonar/sonar-scanner-5.0.1.3006-linux/bin" >> $GITHUB_PATH + + - name: Verify Java version + run: java -version + + - name: SonarQube Scan + env: + SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST }} + SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }} + run: | + sonar-scanner \ + -Dsonar.projectKey=${{ github.event.repository.name }} \ + -Dsonar.sources=. \ + -Dsonar.host.url=${SONAR_HOST_URL} \ + -Dsonar.token=${SONAR_TOKEN} \ No newline at end of file