Add quality gate workflow 13.
This commit is contained in:
committed by
vitor-aignosi
parent
9948a2cc9b
commit
a07c108595
46
.github/workflows/quality-gate.yml
vendored
46
.github/workflows/quality-gate.yml
vendored
@@ -14,17 +14,14 @@ jobs:
|
||||
name: SonarQube Analysis
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read # Necessário para checkout
|
||||
# Adicione outras permissões se o token do app precisar delas,
|
||||
# mas 'write-all' é muito amplo e geralmente não necessário para o token do workflow em si.
|
||||
# As permissões para o token do app são definidas na configuração do GitHub App.
|
||||
contents: read
|
||||
|
||||
steps:
|
||||
- name: ⬇️ Checkout Code
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
fetch-depth: 0 # Necessário para SonarQube analysis
|
||||
persist-credentials: false # Importante: Evita que o token padrão do checkout interfira
|
||||
fetch-depth: 0
|
||||
persist-credentials: false
|
||||
|
||||
- name: Generate App Token
|
||||
id: generate-app-token
|
||||
@@ -32,46 +29,22 @@ jobs:
|
||||
with:
|
||||
app-id: ${{ secrets.APP_ID }}
|
||||
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
||||
owner: 'Aignosi' # O proprietário (usuário ou organização) dos repositórios
|
||||
repositories: 'sientia-dataops-library,sientia-mlops-library' # Repositórios que o token do app precisa acessar
|
||||
owner: 'Aignosi'
|
||||
repositories: 'sientia-dataops-library,sientia-mlops-library'
|
||||
|
||||
- name: Prepare requirements.txt
|
||||
id: prepare-requirements
|
||||
run: |
|
||||
if [ ! -f requirements.txt ]; then
|
||||
echo "requirements.txt not found!"
|
||||
# Decide how to handle: exit 1, or create an empty one, or use a default
|
||||
# For now, let's assume it might be optional or created elsewhere if not present.
|
||||
# If it's mandatory, uncomment the line below:
|
||||
exit 1
|
||||
echo "PROCESSED_REQUIREMENTS_FILE=requirements.txt" >> $GITHUB_OUTPUT # Fallback or handle error
|
||||
else
|
||||
# Converte URLs SSH (git@github.com: ou git+ssh://git@github.com/) para HTTPS genéricas
|
||||
# Exemplo: git+ssh://git@github.com/Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
|
||||
# Exemplo: git@github.com:Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
|
||||
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
|
||||
-e "s|git@github.com:|git+https://github.com/|g" \
|
||||
requirements.txt > requirements_prepared.txt
|
||||
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
|
||||
echo "--- Original requirements.txt ---"
|
||||
cat requirements.txt
|
||||
echo "--- Prepared requirements_prepared.txt ---"
|
||||
cat requirements_prepared.txt
|
||||
fi
|
||||
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
|
||||
-e "s|git@github.com:|git+https://github.com/|g" \
|
||||
requirements.txt > requirements_prepared.txt
|
||||
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Configure Git to use App Token
|
||||
env:
|
||||
# Este é o token gerado pelo GitHub App, com permissões para os repositórios de dependência
|
||||
GH_APP_TOKEN: ${{ steps.generate-app-token.outputs.token }}
|
||||
run: |
|
||||
# Configura o Git para usar o token do app para todas as URLs HTTPS do github.com
|
||||
# Isso garante que o pip, ao clonar dependências, usará este token.
|
||||
git config --global url."https://oauth2:${GH_APP_TOKEN}@github.com/".insteadOf "https://github.com/"
|
||||
echo "Git authentication configured to use the App Token for github.com"
|
||||
|
||||
# (Opcional) Para depuração: Verifique se o token pode listar o repositório remoto
|
||||
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-dataops-library.git HEAD || echo "Failed to ls-remote sientia-dataops-library"
|
||||
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-mlops-library.git HEAD || echo "Failed to ls-remote sientia-mlops-library"
|
||||
|
||||
- name: 🔧 Setup Python
|
||||
uses: actions/setup-python@v4
|
||||
@@ -89,7 +62,6 @@ jobs:
|
||||
- name: 📦 Install Dependencies
|
||||
run: |
|
||||
python -m pip install --upgrade pip
|
||||
echo "Installing dependencies from ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}"
|
||||
pip install -r ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}
|
||||
pip install pytest pytest-cov
|
||||
|
||||
|
||||
Reference in New Issue
Block a user