diff --git a/.github/workflows/ci-cd-pipeline.yaml b/.github/workflows/ci-cd-pipeline.yaml index ce9645a7..a798a0d6 100644 --- a/.github/workflows/ci-cd-pipeline.yaml +++ b/.github/workflows/ci-cd-pipeline.yaml @@ -28,9 +28,21 @@ jobs: cache: 'maven' - name: Build with Maven - run: mvn -B package --file pom.xml - - - name: Run unit tests - run: mvn test - - + run: mvn -B package -Pdev --file pom.xml + + # Static code analysis with SonarScanner + + - name: Install SonarScanner + run: | + wget https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-4.7.0.2747-linux.zip + unzip sonar-scanner-cli-4.7.0.2747-linux.zip + export SONAR_SCANNER_HOME=`pwd`/sonar-scanner-4.7.0.2747-linux + export PATH=$SONAR_SCANNER_HOME/bin:$PATH + + - name: Run SonarScanner + run: | + sonar-scanner \ + -Dsonar.projectKey=your-project-key \ + -Dsonar.sources=. \ + -Dsonar.host.url=https://sonarcloud.io \ + -Dsonar.login=your-sonarcloud-token