Skip to content

Merge pull request #20 from DFE-Digital/feature/security-tests #51

Merge pull request #20 from DFE-Digital/feature/security-tests

Merge pull request #20 from DFE-Digital/feature/security-tests #51

Workflow file for this run

name: .NET
on:
push:
branches: [ main ]
paths:
- 'src/**'
pull_request:
branches: [ main ]
types: [opened, synchronize, reopened]
paths:
- 'src/**'
env:
JAVA_VERSION: '21'
DOTNET_VERSION: '8.0.x'
jobs:
build:
name: Build, Test and Analyse
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0 # Shallow clones disabled for a better relevancy of SC analysis
- name: Setup .NET ${{ env.DOTNET_VERSION }}
uses: actions/setup-dotnet@v4
with:
dotnet-version: ${{ env.DOTNET_VERSION }}
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v4
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: 'microsoft'
- name: Cache SonarCloud packages
uses: actions/cache@v4
with:
path: ~\sonar\cache
key: ${{ runner.os }}-sonar
restore-keys: ${{ runner.os }}-sonar
- name: Install SonarCloud scanners
run: dotnet tool install --global dotnet-sonarscanner
- name: Install dotnet reportgenerator
run: dotnet tool install --global dotnet-reportgenerator-globaltool
- name: Add nuget package source
run: dotnet nuget add source --username USERNAME --password ${{ secrets.GITHUB_TOKEN }} --store-password-in-clear-text --name github "https://nuget.pkg.github.com/DFE-Digital/index.json"
- name: Restore dependencies
run: dotnet restore Dfe.RegionalImprovementForStandardsAndExcellence.sln
- name: Build, Test and Analyze
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
run: |
dotnet-sonarscanner begin /d:sonar.scanner.skipJreProvisioning=true /k:"DFE-Digital_regional-improvement-for-standards-and-excellence" /o:"dfe-digital" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io"
dotnet build Dfe.RegionalImprovementForStandardsAndExcellence.sln --no-restore
dotnet test Dfe.RegionalImprovementForStandardsAndExcellence.sln --no-build --verbosity normal --collect:"XPlat Code Coverage"
dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}"