ci-github-actions/.github/workflows/test-shell-scripts.yml at master · SonarSource/ci-github-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
---
name: Test Shell Scripts
on:
  pull_request:
  merge_group:
  push:
    branches:
      - master
      - branch-*
  workflow_dispatch:

jobs:
  test-shell-scripts:
    runs-on: warp-custom-ubuntu-24-04
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          fetch-depth: 0
      - uses: ./config-npm
      - uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4.2.0
        with:
          version: 2026.6.14
          tool_versions: |
            pipx 1.12.0
            pipx:check-jsonschema 0.37.2
      - name: Run ShellSpec tests
        # FIXME BUILD-8337: improve setup of kcov
        run: |
          curl -L -O https://archive.ubuntu.com/ubuntu/pool/universe/k/kcov/kcov_38+dfsg-1_amd64.deb
          sudo dpkg -i --path-exclude=/usr/share/doc/* --path-exclude=/usr/share/man/* kcov_38+dfsg-1_amd64.deb
          rm kcov_38+dfsg-1_amd64.deb

          ./run_shell_tests.sh
      - name: Vault
        id: secrets
        uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1
        with:
          secrets: |
            development/kv/data/sonarcloud url | SONAR_URL;
            development/kv/data/sonarcloud token | SONAR_TOKEN;
      - name: Sonar Analysis
        if: steps.secrets.outcome == 'success'
        # FIXME BUILD-8337: improve usage of sonar-scanner-cli
        env:
          SONAR_URL: ${{ steps.secrets.outputs.vault && fromJSON(steps.secrets.outputs.vault).SONAR_URL || '' }}
          SONAR_TOKEN: ${{ steps.secrets.outputs.vault && fromJSON(steps.secrets.outputs.vault).SONAR_TOKEN || '' }}
          SONAR_SCANNER_CLI_VERSION: 6.1.0.4477
        run: |
          SCANNER_ZIP="sonar-scanner-cli-${SONAR_SCANNER_CLI_VERSION}-linux-x64.zip"
          curl -L -O "https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/$SCANNER_ZIP"
          unzip "sonar-scanner-cli-${SONAR_SCANNER_CLI_VERSION}-linux-x64.zip"
          mv "sonar-scanner-${SONAR_SCANNER_CLI_VERSION}-linux-x64" sonar-scanner-cli
          chmod +x sonar-scanner-cli/bin/sonar-scanner

          echo "DEBUG: GITHUB_ACTION_PATH=${GITHUB_ACTION_PATH}"
          echo "DEBUG: PWD=$(pwd)"
          mkdir coverage/coverage_data
          sed "s,/${GITHUB_ACTION_PATH}/,/,g" coverage/sonarqube.xml > coverage/coverage_data/sonar_coverage.xml
          ./sonar-scanner-cli/bin/sonar-scanner -X -Dsonar.host.url="${SONAR_URL}" -Dsonar.token="${SONAR_TOKEN}"