chore: add 1ES compliant labels to release pipeline job #787
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sonarcloud | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: [".vscode/**"] | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| paths-ignore: [".vscode/**"] | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| jobs: | |
| checksecret: | |
| name: check if SONAR_TOKEN is set in github secrets | |
| runs-on: ubuntu-latest | |
| outputs: | |
| is_SONAR_TOKEN_set: ${{ steps.checksecret_job.outputs.is_SONAR_TOKEN_set }} | |
| steps: | |
| - name: Check whether unity activation requests should be done | |
| id: checksecret_job | |
| run: | | |
| echo "is_SONAR_TOKEN_set=${{ env.SONAR_TOKEN != '' }}" >> $GITHUB_OUTPUT | |
| build: | |
| needs: [checksecret] | |
| if: needs.checksecret.outputs.is_SONAR_TOKEN_set == 'true' | |
| name: Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: "adopt" | |
| java-version: 17 | |
| - name: Setup .NET | |
| uses: actions/setup-dotnet@v4 | |
| with: # At the moment the scanner requires dotnet 5 https://www.nuget.org/packages/dotnet-sonarscanner | |
| dotnet-version: | | |
| 5.x | |
| 9.x | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis | |
| - name: Cache SonarCloud packages | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.sonar/cache | |
| key: ${{ runner.os }}-sonar | |
| restore-keys: ${{ runner.os }}-sonar | |
| - name: Install SonarCloud scanner | |
| run: dotnet tool install dotnet-sonarscanner --create-manifest-if-needed | |
| - name: Build and analyze | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any | |
| CollectCoverage: true | |
| CoverletOutputFormat: "opencover" # https://github.com/microsoft/vstest/issues/4014#issuecomment-1307913682 | |
| shell: pwsh | |
| run: | | |
| dotnet tool run dotnet-sonarscanner begin /k:"microsoft_kiota-abstractions-dotnet" /o:"microsoft" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.cs.opencover.reportsPaths="tests/abstractions/coverage.net9.0.opencover.xml,tests/authentication/azure/coverage.net9.0.opencover.xml,tests/http/httpClient/coverage.net9.0.opencover.xml,tests/serialization/json/coverage.net9.0.opencover.xml,tests/serialization/text/coverage.net9.0.opencover.xml,tests/serialization/form/coverage.net9.0.opencover.xml,tests/serialization/multipart/coverage.net9.0.opencover.xml,tests/bundle/coverage.net9.0.opencover.xml" | |
| dotnet workload restore | |
| dotnet build | |
| dotnet test Microsoft.Kiota.sln --no-build --verbosity normal /p:CollectCoverage=true /p:CoverletOutputFormat=opencover --framework net9.0 | |
| dotnet tool run dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}" |