Skip to content

Sonarcloud updates#273

Merged
davetsay merged 6 commits into
NASA-AMMOS:mainfrom
lylebarner:sonarcloud_updates
Aug 7, 2025
Merged

Sonarcloud updates#273
davetsay merged 6 commits into
NASA-AMMOS:mainfrom
lylebarner:sonarcloud_updates

Conversation

@lylebarner
Copy link
Copy Markdown
Collaborator

@lylebarner lylebarner commented Feb 6, 2025

This pull request incorporates changes required to allow openmct-mcws to allow for security scanning to be performed using SonarCloud

  • Create new GitHubAction that runs CoddeQL, pre-processes the results for import into SonarCloud, performs SonarCloud analysis and imports CodeQL results
  • Create new configuration file for SonarCloud analysis

Remaining actions required to enable analysis

  • Configured project on SonarCloud server (must be performed by organization owner)
  • Add SonarCloud access token to repository as SONAR_TOKEN

push:
branches: [ "main", "release/*" ]
pull_request:
branches: [ "main", "release/*" ]
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍


on:
push:
branches: [ "main", "release/*" ]
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Copy link
Copy Markdown
Collaborator

@davetsay davetsay left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me. I just have one question. I see some scrub stuff included, and some scrub stuff commented out. Are we able to now just remove scrub entirely? Or, is there an interim phase while all the projects get onto SonarCloud?

@davetsay
Copy link
Copy Markdown
Collaborator

davetsay commented Feb 6, 2025

@lylebarner , also, a sonarcloud action is failing

@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown
Collaborator

@davetsay davetsay left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SONAR_TOKEN has been added to repository. Looks Good!

@davetsay davetsay enabled auto-merge (squash) August 7, 2025 18:30
auto-merge was automatically disabled August 7, 2025 18:34

Pull Request is not mergeable

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Aug 7, 2025

@davetsay davetsay merged commit 8ebbd41 into NASA-AMMOS:main Aug 7, 2025
3 of 5 checks passed
davetsay added a commit that referenced this pull request Aug 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants