mirror of
https://github.com/kitabisa/sonarqube-action.git
synced 2025-11-01 22:04:20 +08:00
update readme
This commit is contained in:
parent
9843b73be8
commit
3d458002e9
55
README.md
55
README.md
@ -1,2 +1,53 @@
|
||||
# sonarqube-action
|
||||
Integrate SonarQube scanner to GitHub Actions
|
||||
# SonarQube GitHub Action
|
||||
|
||||
Using this GitHub Action, scan your code with SonarQube scanner to detects bugs, vulnerabilities and code smells in more than 20 programming languages!
|
||||
|
||||
<img src="https://www.sonarqube.org/assets/logo-31ad3115b1b4b120f3d1efd63e6b13ac9f1f89437f0cf6881cc4d8b5603a52b4.svg" width="320px">
|
||||
|
||||
SonarQube is an open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities on 20+ programming languages.
|
||||
|
||||
## Requirements
|
||||
|
||||
* Have SonarQube on server. [Install now](https://docs.sonarqube.org/latest/setup/install-server/) if it's not already the case!
|
||||
|
||||
## Usage
|
||||
|
||||
The workflow, usually declared in `.github/workflows/build.yml`, looks like:
|
||||
|
||||
```yaml
|
||||
on: push
|
||||
name: Main Workflow
|
||||
jobs:
|
||||
sonarQubeTrigger:
|
||||
name: SonarQube Trigger
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@master
|
||||
- name: SonarQube Scan
|
||||
uses: kitabisa/sonarqube-action@master
|
||||
with:
|
||||
host: ${{ secrets.SONARQUBE_HOST }}
|
||||
login: ${{ secrets.SONARQUBE_TOKEN }}
|
||||
```
|
||||
|
||||
You can change the analysis base directory by using the optional input `projectBaseDir` like this:
|
||||
|
||||
```yaml
|
||||
uses: kitabisa/sonarqube-action@master
|
||||
with:
|
||||
projectBaseDir: my-custom-directory
|
||||
```
|
||||
|
||||
## Secrets
|
||||
|
||||
- `host` - **_(Required)_** this is the SonarQube server URL.
|
||||
- `login` - **_(Required)_** the login or authentication token of a SonarQube user with Execute Analysis permission on the project. See [how to generate SonarQube token](https://docs.sonarqube.org/latest/user-guide/user-token/).
|
||||
- `password` - The password that goes with the `login` username. This should be left blank if an `login` are authentication token.
|
||||
|
||||
You can set all variable in the "Secrets" settings page of your repository.
|
||||
|
||||
## License
|
||||
|
||||
The Dockerfile and associated scripts and documentation in this project are released under the MIT License.
|
||||
|
||||
Container images built with this project include third party materials.
|
||||
Loading…
x
Reference in New Issue
Block a user