Skip to content

Commit

Permalink
fix(ci): adding python deps check
Browse files Browse the repository at this point in the history
  • Loading branch information
Pipazoul committed Feb 12, 2024
1 parent c553af5 commit d992ab8
Showing 1 changed file with 22 additions and 7 deletions.
29 changes: 22 additions & 7 deletions .github/workflows/sonarqube.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,18 +15,33 @@ jobs:
- uses: actions/checkout@v2
with:
fetch-depth: 0 # Shallow clones should be disabled for better analysis relevancy

# Set up Python for OWASP dependency check
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.8' # Specify the Python version


- name: Install Python dependencies
run: |
python -m pip install --upgrade pip
pip install
working-directory: . # Change this to your Python project directory

- name: OWASP Dependency Check
uses: dependency-check/Dependency-Check_Action@main
with:
project: 'maquette-augmentee-back'
path: '.'
format: 'HTML'
failBuild: true

- name: Upload Test results
uses: actions/upload-artifact@master
with:
name: Depcheck report
path: ${{github.workspace}}/reports/dependency-check-report.html
name: Depcheck report
path: ${{github.workspace}}/reports/dependency-check-report.html

- name: Commit Reports
uses: stefanzweifel/git-auto-commit-action@v5
Expand All @@ -41,8 +56,8 @@ jobs:
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
# Uncomment the following lines to fail the job when Quality Gate is red
# - uses: sonarsource/sonarqube-quality-gate-action@master
# timeout-minutes: 5
# env:
# SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
# Uncomment the following lines to fail the job when Quality Gate is red
# - uses: sonarsource/sonarqube-quality-gate-action@master
# timeout-minutes: 5
# env:
# SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

0 comments on commit d992ab8

Please sign in to comment.