Add quality gate workflow 13.
This commit is contained in:
committed by
vitor-aignosi
parent
9948a2cc9b
commit
a07c108595
46
.github/workflows/quality-gate.yml
vendored
46
.github/workflows/quality-gate.yml
vendored
@@ -14,17 +14,14 @@ jobs:
|
|||||||
name: SonarQube Analysis
|
name: SonarQube Analysis
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
permissions:
|
permissions:
|
||||||
contents: read # Necessário para checkout
|
contents: read
|
||||||
# Adicione outras permissões se o token do app precisar delas,
|
|
||||||
# mas 'write-all' é muito amplo e geralmente não necessário para o token do workflow em si.
|
|
||||||
# As permissões para o token do app são definidas na configuração do GitHub App.
|
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: ⬇️ Checkout Code
|
- name: ⬇️ Checkout Code
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0 # Necessário para SonarQube analysis
|
fetch-depth: 0
|
||||||
persist-credentials: false # Importante: Evita que o token padrão do checkout interfira
|
persist-credentials: false
|
||||||
|
|
||||||
- name: Generate App Token
|
- name: Generate App Token
|
||||||
id: generate-app-token
|
id: generate-app-token
|
||||||
@@ -32,46 +29,22 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
app-id: ${{ secrets.APP_ID }}
|
app-id: ${{ secrets.APP_ID }}
|
||||||
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
private-key: ${{ secrets.APP_PRIVATE_KEY }}
|
||||||
owner: 'Aignosi' # O proprietário (usuário ou organização) dos repositórios
|
owner: 'Aignosi'
|
||||||
repositories: 'sientia-dataops-library,sientia-mlops-library' # Repositórios que o token do app precisa acessar
|
repositories: 'sientia-dataops-library,sientia-mlops-library'
|
||||||
|
|
||||||
- name: Prepare requirements.txt
|
- name: Prepare requirements.txt
|
||||||
id: prepare-requirements
|
id: prepare-requirements
|
||||||
run: |
|
run: |
|
||||||
if [ ! -f requirements.txt ]; then
|
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
|
||||||
echo "requirements.txt not found!"
|
-e "s|git@github.com:|git+https://github.com/|g" \
|
||||||
# Decide how to handle: exit 1, or create an empty one, or use a default
|
requirements.txt > requirements_prepared.txt
|
||||||
# For now, let's assume it might be optional or created elsewhere if not present.
|
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
|
||||||
# If it's mandatory, uncomment the line below:
|
|
||||||
exit 1
|
|
||||||
echo "PROCESSED_REQUIREMENTS_FILE=requirements.txt" >> $GITHUB_OUTPUT # Fallback or handle error
|
|
||||||
else
|
|
||||||
# Converte URLs SSH (git@github.com: ou git+ssh://git@github.com/) para HTTPS genéricas
|
|
||||||
# Exemplo: git+ssh://git@github.com/Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
|
|
||||||
# Exemplo: git@github.com:Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
|
|
||||||
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
|
|
||||||
-e "s|git@github.com:|git+https://github.com/|g" \
|
|
||||||
requirements.txt > requirements_prepared.txt
|
|
||||||
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
|
|
||||||
echo "--- Original requirements.txt ---"
|
|
||||||
cat requirements.txt
|
|
||||||
echo "--- Prepared requirements_prepared.txt ---"
|
|
||||||
cat requirements_prepared.txt
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Configure Git to use App Token
|
- name: Configure Git to use App Token
|
||||||
env:
|
env:
|
||||||
# Este é o token gerado pelo GitHub App, com permissões para os repositórios de dependência
|
|
||||||
GH_APP_TOKEN: ${{ steps.generate-app-token.outputs.token }}
|
GH_APP_TOKEN: ${{ steps.generate-app-token.outputs.token }}
|
||||||
run: |
|
run: |
|
||||||
# Configura o Git para usar o token do app para todas as URLs HTTPS do github.com
|
|
||||||
# Isso garante que o pip, ao clonar dependências, usará este token.
|
|
||||||
git config --global url."https://oauth2:${GH_APP_TOKEN}@github.com/".insteadOf "https://github.com/"
|
git config --global url."https://oauth2:${GH_APP_TOKEN}@github.com/".insteadOf "https://github.com/"
|
||||||
echo "Git authentication configured to use the App Token for github.com"
|
|
||||||
|
|
||||||
# (Opcional) Para depuração: Verifique se o token pode listar o repositório remoto
|
|
||||||
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-dataops-library.git HEAD || echo "Failed to ls-remote sientia-dataops-library"
|
|
||||||
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-mlops-library.git HEAD || echo "Failed to ls-remote sientia-mlops-library"
|
|
||||||
|
|
||||||
- name: 🔧 Setup Python
|
- name: 🔧 Setup Python
|
||||||
uses: actions/setup-python@v4
|
uses: actions/setup-python@v4
|
||||||
@@ -89,7 +62,6 @@ jobs:
|
|||||||
- name: 📦 Install Dependencies
|
- name: 📦 Install Dependencies
|
||||||
run: |
|
run: |
|
||||||
python -m pip install --upgrade pip
|
python -m pip install --upgrade pip
|
||||||
echo "Installing dependencies from ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}"
|
|
||||||
pip install -r ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}
|
pip install -r ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}
|
||||||
pip install pytest pytest-cov
|
pip install pytest pytest-cov
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user