diff --git a/.github/workflows/sonarqube.yaml b/.github/workflows/sonarqube.yaml new file mode 100644 index 0000000..1453987 --- /dev/null +++ b/.github/workflows/sonarqube.yaml @@ -0,0 +1,25 @@ +on: + workflow_call: + secrets: + SONARQUBE_HOST: + required: true + SONARQUBE_TOKEN: + required: true + +name: SonarQube +jobs: + sonarqube: + name: SonarQube + runs-on: ubuntu-latest + + steps: + - name: Checkout source code + uses: actions/checkout@master + with: + fetch-depth: 0 + + - name: SonarQube Scan + uses: sonarsource/sonarqube-scan-action@master + env: + SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST }} + SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/quality_gate.yaml b/.github/workflows/trivy_fs.yaml similarity index 84% rename from .github/workflows/quality_gate.yaml rename to .github/workflows/trivy_fs.yaml index 55cdd95..a3674fd 100644 --- a/.github/workflows/quality_gate.yaml +++ b/.github/workflows/trivy_fs.yaml @@ -1,10 +1,6 @@ on: workflow_call: secrets: - SONARQUBE_HOST: - required: true - SONARQUBE_TOKEN: - required: true DEPENDENCYTRACK_URL: required: true DEPENDENCYTRACK_API_KEY: @@ -12,24 +8,8 @@ on: DEPENDENCYTRACK_PROJECT_UUID: required: true -name: Quality Gate +name: Trivy jobs: - sonarqube: - name: SonarQube - runs-on: ubuntu-latest - - steps: - - name: Checkout source code - uses: actions/checkout@master - with: - fetch-depth: 0 - - - name: SonarQube Scan - uses: sonarsource/sonarqube-scan-action@master - env: - SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST }} - SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }} - trivy: name: SBOM & Dependency Track runs-on: ubuntu-latest