@@ -16,13 +16,25 @@ jobs:
1616 uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # 4.1.6
1717 with :
1818 submodules : ' recursive'
19- - name : Check code meets quality standards
19+ - name : Check code meets quality standards (production)
2020 id : datadog-static-analysis
2121 uses : DataDog/datadog-static-analyzer-github-action@c74aff158c8cc1c3e285660713bcaa5f9c6d696e # v1
2222 with :
23- dd_app_key : ${{ secrets.DD_APP_KEY }}
24- dd_api_key : ${{ secrets.DD_API_KEY }}
25- dd_site : datad0g.com
23+ dd_app_key : ${{ secrets.DATADOG_APP_KEY_PROD }}
24+ dd_api_key : ${{ secrets.DATADOG_API_KEY_PROD }}
25+ dd_site : " datadoghq.com"
26+ dd_service : " dd-trace-java"
27+ dd_env : " ci"
28+ cpu_count : 2
29+ enable_performance_statistics : false
30+ # Also run the static analysis on the staging environment to benefit from the new features not yet released
31+ - name : Check code meets quality standards (staging)
32+ id : datadog-static-analysis-staging
33+ uses : DataDog/datadog-static-analyzer-github-action@c74aff158c8cc1c3e285660713bcaa5f9c6d696e # v1
34+ with :
35+ dd_app_key : ${{ secrets.DATADOG_APP_KEY_STAGING }}
36+ dd_api_key : ${{ secrets.DATADOG_API_KEY_STAGING }}
37+ dd_site : " datad0g.com"
2638 dd_service : " dd-trace-java"
2739 dd_env : " ci"
2840 cpu_count : 2
@@ -74,15 +86,21 @@ jobs:
7486 - name : Perform CodeQL Analysis and upload results to GitHub Security tab
7587 uses : github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
7688
77- # For now, CodeQL SARIF results are not supported by Datadog CI
78- # - name: Upload results to Datadog CI Static Analysis
79- # run: |
80- # wget --no-verbose https://github.com/DataDog/datadog-ci/releases/download/v2.42.0/datadog-ci_linux-x64 -O datadog-ci
81- # chmod +x datadog-ci
82- # ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
83- # env:
84- # DD_API_KEY: ${{ secrets.DD_API_KEY }}
85- # DD_SITE: datad0g.com
89+ - name : Upload results to Datadog CI Static Analysis
90+ run : |
91+ wget --no-verbose https://github.com/DataDog/datadog-ci/releases/latest/download/datadog-ci_linux-x64 -O datadog-ci
92+ chmod +x datadog-ci
93+ ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
94+ env :
95+ DD_API_KEY : ${{ secrets.DATADOG_APP_KEY_PROD }}
96+ DD_SITE : datadoghq.com
97+
98+ - name : Upload results to Datadog Staging CI Static Analysis
99+ run : |
100+ ./datadog-ci sarif upload /home/runner/work/dd-trace-java/results/java.sarif --service dd-trace-java --env ci
101+ env :
102+ DD_API_KEY : ${{ secrets.DATADOG_API_KEY_STAGING }}
103+ DD_SITE : datad0g.com
86104
87105 trivy :
88106 name : Analyze changes with Trivy
@@ -152,9 +170,16 @@ jobs:
152170
153171 - name : Upload results to Datadog CI Static Analysis
154172 run : |
155- wget --no-verbose https://github.com/DataDog/datadog-ci/releases/download/v2.42.0 /datadog-ci_linux-x64 -O datadog-ci
173+ wget --no-verbose https://github.com/DataDog/datadog-ci/releases/latest/download /datadog-ci_linux-x64 -O datadog-ci
156174 chmod +x datadog-ci
157175 ./datadog-ci sarif upload trivy-results.sarif --service dd-trace-java --env ci
158176 env :
159- DD_API_KEY : ${{ secrets.DD_API_KEY }}
177+ DD_API_KEY : ${{ secrets.DATADOG_APP_KEY_PROD }}
178+ DD_SITE : datadoghq.com
179+
180+ - name : Upload results to Datadog Staging CI Static Analysis
181+ run : |
182+ ./datadog-ci sarif upload trivy-results.sarif --service dd-trace-java --env ci
183+ env :
184+ DD_API_KEY : ${{ secrets.DATADOG_API_KEY_STAGING }}
160185 DD_SITE : datad0g.com
0 commit comments