From cba5afd93209b0e230f4be3a6416c7724eb1c819 Mon Sep 17 00:00:00 2001 From: Andre Miras Date: Sun, 10 May 2020 00:31:22 +0200 Subject: [PATCH] Enables SonarQube checks for Java TODO https://sonarcloud.io/account/security/ --- .github/workflows/sonarqube.yml | 17 +++++++++++++++++ sonar-project.properties | 6 ++++++ 2 files changed, 23 insertions(+) create mode 100644 .github/workflows/sonarqube.yml create mode 100644 sonar-project.properties diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml new file mode 100644 index 0000000000..eed9223c3d --- /dev/null +++ b/.github/workflows/sonarqube.yml @@ -0,0 +1,17 @@ +name: SonarQube + +on: ['push', 'pull_request'] + +jobs: + sonarcloud: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + with: + # Disabling shallow clone is recommended for improving relevancy of reporting + fetch-depth: 0 + - name: SonarCloud Scan + uses: sonarsource/sonarcloud-github-action@v1.2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/sonar-project.properties b/sonar-project.properties new file mode 100644 index 0000000000..06d124cf73 --- /dev/null +++ b/sonar-project.properties @@ -0,0 +1,6 @@ +sonar.organization=andremiras +sonar.projectKey=AndreMiras_python + +# relative paths to source directories. More details and properties are described +# in https://sonarcloud.io/documentation/project-administration/narrowing-the-focus/ +sonar.sources=pythonforandroid/bootstraps/