pom/spring-boot-starter
pom/spring-boot-starter
5
0
Fork 0
Code Issues 1 Pull requests 3 Projects Releases 14 Packages Wiki Activity Actions

fix: wait for qualitygate when running sonarqube pipeline #1

Merged
oliver merged 3 commits from sonar-wait-for-qualitygate into main 2025-01-05 20:33:40 +01:00
Conversation 0 Commits 3 Files changed 4 +18 -11
4 changed files with 18 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
.forgejo/workflows/release.yaml
View file

@ -129,9 +129,9 @@ jobs:
uses: https://github.com/actions/cache@v4 uses: https://github.com/actions/cache@v4
with: with:
path: ~/.sdkman path: ~/.sdkman
key: ${{ runner.os }}-sdkman key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
restore-keys: | restore-keys: |
${{ runner.os }}-sdkman ${{ runner.os }}-sdkman-
env: env:
ACTIONS_STEP_DEBUG: true ACTIONS_STEP_DEBUG: true
@ -139,9 +139,9 @@ jobs:
uses: https://github.com/actions/cache@v4 uses: https://github.com/actions/cache@v4
with: with:
path: ~/.m2/repository path: ~/.m2/repository
key: ${{ runner.os }}-maven key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
restore-keys: | restore-keys: |
${{ runner.os }}-maven ${{ runner.os }}-maven-
env: env:
ACTIONS_STEP_DEBUG: true ACTIONS_STEP_DEBUG: true

12
.forgejo/workflows/sonarqube.yaml
View file

@ -108,9 +108,9 @@ jobs:
uses: https://github.com/actions/cache@v4 uses: https://github.com/actions/cache@v4
with: with:
path: ~/.sdkman path: ~/.sdkman
key: ${{ runner.os }}-sdkman key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
restore-keys: | restore-keys: |
${{ runner.os }}-sdkman ${{ runner.os }}-sdkman-
env: env:
ACTIONS_STEP_DEBUG: true ACTIONS_STEP_DEBUG: true
@ -125,9 +125,9 @@ jobs:
uses: https://github.com/actions/cache@v4 uses: https://github.com/actions/cache@v4
with: with:
path: ~/.m2/repository path: ~/.m2/repository
key: ${{ runner.os }}-maven key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
restore-keys: | restore-keys: |
${{ runner.os }}-maven ${{ runner.os }}-maven-
env: env:
ACTIONS_STEP_DEBUG: true ACTIONS_STEP_DEBUG: true
@ -139,4 +139,6 @@ jobs:
env: env:
SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }} SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
SONAR_HOST_URL: ${{ vars.SONARQUBE_HOST }} SONAR_HOST_URL: ${{ vars.SONARQUBE_HOST }}
run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar run: >
mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar
-Dsonar.qualitygate.wait=true

3
dependency-check-suppressions.xml Normal file
View file

@ -0,0 +1,3 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
</suppressions>

6
pom.xml
View file

@ -341,7 +341,6 @@
</publishRegistry> </publishRegistry>
</docker> </docker>
<image> <image>
<!--<builder>dashaun/builder:tiny</builder>-->
<name>cr.w9r.dev/spring-boot/${project.artifactId}:${project.version}</name> <name>cr.w9r.dev/spring-boot/${project.artifactId}:${project.version}</name>
<publish>true</publish> <publish>true</publish>
</image> </image>
@ -398,6 +397,10 @@
<nvdDatafeedUrl>https://vulnz.w9r.de/nvd/nvdcve-{0}.json.gz</nvdDatafeedUrl> <nvdDatafeedUrl>https://vulnz.w9r.de/nvd/nvdcve-{0}.json.gz</nvdDatafeedUrl>
<nvdDatafeedServerId>vulnz</nvdDatafeedServerId> <nvdDatafeedServerId>vulnz</nvdDatafeedServerId>
<formats>HTML,XML,CSV,JSON,JUNIT,GITLAB</formats> <formats>HTML,XML,CSV,JSON,JUNIT,GITLAB</formats>
<suppressionFiles>
<suppressionFile>dependency-check-suppressions.xml</suppressionFile>
<suppressionFile>https://w9r.dev/w9r.dev/dependency-check-suppressions/raw/branch/main/dependency-check-suppressions.xml</suppressionFile>
</suppressionFiles>
</configuration> </configuration>
<executions> <executions>
<execution> <execution>
@ -515,7 +518,6 @@
<artifactId>spring-boot-maven-plugin</artifactId> <artifactId>spring-boot-maven-plugin</artifactId>
<configuration> <configuration>
<image> <image>
<!--<builder>paketobuildpacks/builder-jammy-tiny:latest</builder>-->
<builder>dashaun/builder:tiny</builder> <builder>dashaun/builder:tiny</builder>
<env> <env>
<BP_NATIVE_IMAGE>true</BP_NATIVE_IMAGE> <BP_NATIVE_IMAGE>true</BP_NATIVE_IMAGE>