Skip to content

ci: sonarcloud fix apt packages #12

ci: sonarcloud fix apt packages

ci: sonarcloud fix apt packages #12

Workflow file for this run

name: SonarCloud
on:
push:
branches:
- main
paths-ignore:
- "docs/**"
pull_request:
paths:
- '**/*.c'
- '**/*.h'
jobs:
build:
name: Build and analyze
runs-on: large16
container: ghcr.io/nrfconnect/sdk-nrf-toolchain:v2.9.0
defaults:
run:
# Bash shell is needed to set toolchain related environment variables in docker container
# It is a workaround for GitHub Actions limitation https://github.com/actions/runner/issues/1964
shell: bash
env:
BUILD_WRAPPER_OUT_DIR: build_wrapper_output_directory # Directory where build-wrapper output will be placed
CMAKE_PREFIX_PATH: /opt/toolchains
steps:
- uses: nrfconnect/action-checkout-west-update@main
if: github.event_name == 'pull_request'
with:
git-ref: ${{ github.event.pull_request.head.sha }}
git-fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
path: ncs/nrf
- uses: nrfconnect/action-checkout-west-update@main
if: github.event_name != 'pull_request'
with:
git-fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
path: ncs/nrf
- name: Install dependencies
run: |
apt-get update
apt-get install -y curl unzip ruby gcc-multilib make
- name: Install sonar-scanner and build-wrapper
uses: SonarSource/sonarcloud-github-c-cpp@v3
- name: Build and test
working-directory: ncs/nrf
run: |
build-wrapper-linux-x86-64 --out-dir ${{ env.BUILD_WRAPPER_OUT_DIR }} ../zephyr/scripts/twister \
--ninja --integration \
--quarantine-list scripts/quarantine.yaml --quarantine-list scripts/quarantine_integration.yaml \
-T applications/asset_tracker_v2
- name: Extract coverage into sonarqube xml format
working-directory: ncs/nrf
run: |
gcovr twister-out -v --merge-mode-functions=separate --sonarqube coverage.xml
- name: Run sonar-scanner on main
working-directory: ncs/nrf
if: github.event_name != 'pull_request'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
run: |
sonar-scanner \
--define sonar.cfamily.build-wrapper-output="${{ env.BUILD_WRAPPER_OUT_DIR }}" \
--define project.settings=sonar-project.properties \
--define sonar.coverageReportPaths=coverage.xml \
--define sonar.inclusions=**/*.c,**/*.h \
--define sonar.exclusions=tests/,drivers/sensor/*_dummy/
- name: Run sonar-scanner on PR
working-directory: ncs/nrf
if: github.event_name == 'pull_request'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
PR_NUMBER: ${{ github.event.pull_request.number }}
PR_BRANCH: ${{ github.event.pull_request.head.ref }}
BASE_REF: ${{ github.event.pull_request.base.ref }}
HEAD_SHA: ${{ github.event.pull_request.head.sha }}
run: |
sonar-scanner \
--define sonar.cfamily.build-wrapper-output="${{ env.BUILD_WRAPPER_OUT_DIR }}" \
--define project.settings=sonar-project.properties \
--define sonar.coverageReportPaths=coverage.xml \
--define sonar.inclusions=**/*.c,**/*.h \
--define sonar.exclusions=tests/,drivers/sensor/*_dummy/ \
--define sonar.scm.revision=${{ env.HEAD_SHA }} \
--define sonar.pullrequest.key=${{ env.PR_NUMBER }} \
--define sonar.pullrequest.branch=${{ env.PR_BRANCH }} \
--define sonar.pullrequest.base=${{ env.BASE_REF }}