kirillt
commented
8 months ago Repository secret SONAR_TOKEN is created.
That's what official docs say, but we did it a bit different way in arklib-android:
Update your
build.gradle.ktsfile with theorg.sonarqubeplugin and its configuration:plugins { id("org.sonarqube") version "4.4.1.3373" }
sonar { properties { property("sonar.projectKey", "ARK-Builders_ARK-Navigator") property("sonar.organization", "ark-builders") property("sonar.host.url", "https://sonarcloud.io") } }
> Create or update your `.github/workflows/build.yml`. Here is a base configuration to run a SonarCloud analysis on your master branch and Pull Requests. If you already have some GitHub Actions, you might want to just add some of these new steps to an existing one.name: SonarCloud on: push: branches:
- main pull_request: types: [opened, synchronize, reopened] jobs: build: name: Build and analyze runs-on: ubuntu-latest steps:
- uses: actions/checkout@v3 with: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: Set up JDK 17 uses: actions/setup-java@v3 with: java-version: 17 distribution: 'zulu' # Alternative distribution options are available
- name: Cache SonarCloud packages uses: actions/cache@v3 with: path: ~/.sonar/cache key: ${{ runner.os }}-sonar restore-keys: ${{ runner.os }}-sonar
- name: Cache Gradle packages uses: actions/cache@v3 with: path: ~/.gradle/caches key: ${{ runner.os }}-gradle-${{ hashFiles('*/.gradle') }} restore-keys: ${{ runner.os }}-gradle
- name: Build and analyze
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
run: ./gradlew build sonar --info
tuancoltech
Let's have similar SonarCloud integration:
We also need to check current warnings and fix those which are quick to fix: Reference issue: https://github.com/ARK-Builders/ARK-Navigator/issues/405