Bump mongoose from 5.13.14 to 6.13.6 in /annotation-service #459
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# | |
# Copyright 2019-2024 VMware, Inc. | |
# SPDX-License-Identifier: Apache-2.0 | |
# | |
name: sonarcloud_scan_app | |
on: | |
push: | |
branches: ["**"] | |
pull_request: | |
branches: ['**'] | |
jobs: | |
#sonar cloud scan job for annotation app | |
scan_annotation_app: | |
runs-on: ubuntu-latest | |
#define variables to be used for SonarCloud scan | |
env: | |
SONAR_ORG: ${{ secrets.SONAR_ORG }} | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v3 | |
with: | |
fetch-depth: 0 | |
- name: Checkout devops branch | |
uses: actions/checkout@v3 | |
with: | |
fetch-depth: 0 | |
ref: 'devops' | |
path: 'devops' | |
- name: SonarCloud setup for annotation-app | |
working-directory: ./devops/sonar | |
run: python ./config_sonar_project.py -ProjectName ${{ env.SONAR_ORG }}-annotation-app -ProjectKey ${{ env.SONAR_ORG }}-annotation-app -OrgKey ${{ env.SONAR_ORG }} -QualityGateName angular-client-gate -QualityGateConditions ./quality_gates/angular-client.json -SonarToken ${{ secrets.SONAR_TOKEN }} | |
- name: SonarCloud Scan annotation-app | |
uses: sonarsource/sonarcloud-github-action@master | |
with: | |
projectBaseDir: ./annotation-app | |
args: > | |
-Dsonar.organization=${{ env.SONAR_ORG }} | |
-Dsonar.projectKey=${{ env.SONAR_ORG }}-annotation-app | |
-Dsonar.test.exclusions=**/node_modules/**/*,*.md,*.txt,*.yml | |
-Dsonar.coverage.exclusions=** | |
#Set below secrets in your Github Actions secrets | |
env: | |
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
GITHUB_TOKEN: ${{ secrets.DATA_GITHUB_TOKEN }} | |