Skip to content

chore(deps): update myrotvorets/node-build:latest docker digest to d7… #3815

chore(deps): update myrotvorets/node-build:latest docker digest to d7…

chore(deps): update myrotvorets/node-build:latest docker digest to d7… #3815

Workflow file for this run

name: SonarCloud Analysis
on:
push:
branches:
- master
pull_request:
branches:
- master
workflow_dispatch:
jobs:
build:
name: SonarCloud Scan
runs-on: ubuntu-latest
permissions:
contents: read
packages: read
if: |
github.event_name != 'pull_request' ||
github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name
steps:
- name: Harden Runner
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
with:
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
api.sonarcloud.io:443
binaries.sonarsource.com:443
github.com:443
npm.pkg.github.com:443
objects.githubusercontent.com:443
pipelinesghubeus23.actions.githubusercontent.com:443
pkg-npm.githubusercontent.com:443
registry.npmjs.org:443
sc-cleancode-sensorcache-eu-central-1-prod.s3.amazonaws.com:443
scanner.sonarcloud.io:443
sonarcloud.io:443
codecov.io:443
storage.googleapis.com:443
- name: Check out the code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
submodules: true
- name: Run SonarCloud analysis
uses: myrotvorets/composite-actions/node-sonarscan@master
with:
sonar-token: ${{ secrets.SONAR_TOKEN }}
registry-url: https://npm.pkg.github.com
test-script: 'test:coverage'
- name: Install codecov
run: npm i -g codecov
- name: Run codecov
run: codecov
env:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}