Release 0.1.2

.gitea/workflows/release.yaml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.gitea/workflows/sonarqube.yaml

@@ -16,8 +16,52 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: SonarQube Scan
-        uses: https://github.com/kitabisa/sonarqube-action@v1.2.1
+      - name: Set up Environment
+        run: |
+          apt update
+          apt install -y zip
+          mkdir -p /root/.jreleaser
+          touch /root/.jreleaser/config.properties
+
+      - name: Install syft
+        uses: https://github.com/anchore/sbom-action/download-syft@v0
+        id: install_syft
         with:
-          host: ${{ secrets.SONARQUBE_HOST }}
-          login: ${{ secrets.SONARQUBE_TOKEN }}
+          syft-version: v1.18.1
+
+      - name: Cache Java and Maven software
+        uses: https://github.com/actions/cache@v4
+        with:
+          path: ~/.sdkman
+          key: ${{ runner.os }}-sdkman
+          restore-keys: |
+            ${{ runner.os }}-sdkman
+        env:
+          ACTIONS_STEP_DEBUG: true
+
+      - name: Cache SonarQube packages
+        uses: https://github.com/actions/cache@v4
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+
+      - name: Cache local Maven repository
+        uses: https://github.com/actions/cache@v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven
+          restore-keys: |
+            ${{ runner.os }}-maven
+        env:
+          ACTIONS_STEP_DEBUG: true
+
+      - name: Install Java & Maven
+        uses: https://github.com/sdkman/sdkman-action@main
+        id: sdkman
+
+      - name: SonarQube Scan
+        env:
+          SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
+          SONAR_HOST_URL: ${{ vars.SONARQUBE_HOST }}
+        run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar

CHANGELOG.md

@@ -1,3 +1,7 @@
+## [0.1.2]
+### 🛠  Build
+- [62a8923](https://w9r.dev/pom/dependencies/commits/62a8923) improve Sonarqube pipeline
+
 ## [0.1.1]
 ### 🛠  Build
 - [90c156e](https://w9r.dev/pom/dependencies/commits/90c156e) add Sonarqube pipeline

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>dev.w9r.pom</groupId>
     <artifactId>dependencies</artifactId>
-    <version>0.1.1</version>
+    <version>0.1.2</version>
 
     <name>Common Dependency Project Object Model for Maven Builds</name>
     <description>Common dependencies and management of their versions</description>