[Snyk] Security upgrade debian from 11 to 13.2 #23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sonar Cloud Analysis | |
| on: | |
| push: | |
| branches: | |
| - master | |
| pull_request_target: | |
| jobs: | |
| sonarcloud: | |
| name: Prepare and run Sonar Scan | |
| runs-on: ubuntu-latest | |
| container: sogno/dpsim:dev | |
| env: | |
| BUILD_WRAPPER_OUT_DIR: build_wrapper_output_directory | |
| steps: | |
| - name: Fetch repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }} | |
| - name: Setup Node 20 | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - name: Install sonar-scanner and build-wrapper | |
| uses: SonarSource/sonarqube-scan-action/install-build-wrapper@v6 | |
| - name: Create Build Folder | |
| run: mkdir build | |
| - name: Setup build directory cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: ${{ github.workspace }}/build | |
| key: wrapper-dir-cache-${{ github.ref }} | |
| - name: Setup sonar cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| .scannerwork | |
| sonar-cache | |
| key: sonar-cache-${{ github.ref }} | |
| - name: Configure CMake | |
| shell: bash | |
| working-directory: ${{ github.workspace }}/build | |
| run: cmake -DCIM_VERSION=CGMES_2.4.15_16FEB2016 "$GITHUB_WORKSPACE" | |
| - name: Run build-wrapper | |
| run: build-wrapper-linux-x86-64 --out-dir "${{ env.BUILD_WRAPPER_OUT_DIR }}" cmake --build build/ -j "$(nproc)" | |
| - name: Run sonar-scanner | |
| uses: SonarSource/sonarqube-scan-action@v6 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| with: | |
| args: > | |
| --define sonar.cfamily.compile-commands=${{ env.BUILD_WRAPPER_OUT_DIR }}/compile_commands.json |