|
|
|
|
name: Sonar
|
|
|
|
|
|
|
|
|
|
on:
|
|
|
|
|
workflow_dispatch:
|
|
|
|
|
pull_request:
|
|
|
|
|
merge_group:
|
|
|
|
|
push:
|
|
|
|
|
branches: [ main, develop ]
|
|
|
|
|
|
|
|
|
|
# Enrich gradle.properties for CI/CD
|
|
|
|
|
env:
|
|
|
|
|
GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx9g -XX:MaxMetaspaceSize=512m -Dfile.encoding=UTF-8 -XX:+HeapDumpOnOutOfMemoryError -XX:+UseG1GC -Dkotlin.daemon.jvm.options=-Xmx4g
|
|
|
|
|
CI_GRADLE_ARG_PROPERTIES: --stacktrace --warn -Dsonar.gradle.skipCompile=true --no-configuration-cache
|
|
|
|
|
GROUP: ${{ format('sonar-{0}', github.ref) }}
|
|
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
|
sonar:
|
|
|
|
|
name: Sonar Quality Checks
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|
# Allow all jobs on main and develop. Just one per PR.
|
|
|
|
|
concurrency:
|
|
|
|
|
group: ${{ format('sonar-{0}', github.ref) }}
|
|
|
|
|
cancel-in-progress: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/develop' }}
|
|
|
|
|
steps:
|
|
|
|
|
- uses: actions/checkout@v4
|
|
|
|
|
with:
|
|
|
|
|
# Ensure we are building the branch and not the branch after being merged on develop
|
|
|
|
|
# https://github.com/actions/checkout/issues/881
|
|
|
|
|
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
|
|
|
|
|
- name: Use JDK 21
|
|
|
|
|
uses: actions/setup-java@v4
|
|
|
|
|
with:
|
|
|
|
|
distribution: 'temurin' # See 'Supported distributions' for available options
|
|
|
|
|
java-version: '21'
|
|
|
|
|
- name: Configure gradle
|
|
|
|
|
uses: gradle/actions/setup-gradle@v4
|
|
|
|
|
with:
|
|
|
|
|
cache-read-only: ${{ github.ref != 'refs/heads/develop' }}
|
|
|
|
|
- name: Build debug code and test fixtures
|
|
|
|
|
run: ./gradlew assembleDebug createFullJarDebugTestFixtures :app:createFullJarGplayDebugTestFixtures $CI_GRADLE_ARG_PROPERTIES
|
|
|
|
|
- name: 🔊 Publish results to Sonar
|
|
|
|
|
env:
|
|
|
|
|
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
|
|
|
|
|
ORG_GRADLE_PROJECT_SONAR_LOGIN: ${{ secrets.SONAR_TOKEN }}
|
|
|
|
|
if: ${{ always() && env.SONAR_TOKEN != '' && env.ORG_GRADLE_PROJECT_SONAR_LOGIN != '' }}
|
|
|
|
|
run: ./gradlew sonar $CI_GRADLE_ARG_PROPERTIES
|
