Add quality gate workflow 13.

This commit is contained in:
Bruno Domingues
2025-05-14 15:25:27 -03:00
committed by vitor-aignosi
parent 9948a2cc9b
commit a07c108595

View File

@@ -14,17 +14,14 @@ jobs:
name: SonarQube Analysis
runs-on: ubuntu-latest
permissions:
contents: read # Necessário para checkout
# Adicione outras permissões se o token do app precisar delas,
# mas 'write-all' é muito amplo e geralmente não necessário para o token do workflow em si.
# As permissões para o token do app são definidas na configuração do GitHub App.
contents: read
steps:
- name: ⬇️ Checkout Code
uses: actions/checkout@v4
with:
fetch-depth: 0 # Necessário para SonarQube analysis
persist-credentials: false # Importante: Evita que o token padrão do checkout interfira
fetch-depth: 0
persist-credentials: false
- name: Generate App Token
id: generate-app-token
@@ -32,46 +29,22 @@ jobs:
with:
app-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
owner: 'Aignosi' # O proprietário (usuário ou organização) dos repositórios
repositories: 'sientia-dataops-library,sientia-mlops-library' # Repositórios que o token do app precisa acessar
owner: 'Aignosi'
repositories: 'sientia-dataops-library,sientia-mlops-library'
- name: Prepare requirements.txt
id: prepare-requirements
run: |
if [ ! -f requirements.txt ]; then
echo "requirements.txt not found!"
# Decide how to handle: exit 1, or create an empty one, or use a default
# For now, let's assume it might be optional or created elsewhere if not present.
# If it's mandatory, uncomment the line below:
exit 1
echo "PROCESSED_REQUIREMENTS_FILE=requirements.txt" >> $GITHUB_OUTPUT # Fallback or handle error
else
# Converte URLs SSH (git@github.com: ou git+ssh://git@github.com/) para HTTPS genéricas
# Exemplo: git+ssh://git@github.com/Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
# Exemplo: git@github.com:Aignosi/repo.git -> git+https://github.com/Aignosi/repo.git
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
-e "s|git@github.com:|git+https://github.com/|g" \
requirements.txt > requirements_prepared.txt
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
echo "--- Original requirements.txt ---"
cat requirements.txt
echo "--- Prepared requirements_prepared.txt ---"
cat requirements_prepared.txt
fi
sed -e "s|git+ssh://git@github.com/|git+https://github.com/|g" \
-e "s|git@github.com:|git+https://github.com/|g" \
requirements.txt > requirements_prepared.txt
echo "PROCESSED_REQUIREMENTS_FILE=requirements_prepared.txt" >> $GITHUB_OUTPUT
- name: Configure Git to use App Token
env:
# Este é o token gerado pelo GitHub App, com permissões para os repositórios de dependência
GH_APP_TOKEN: ${{ steps.generate-app-token.outputs.token }}
run: |
# Configura o Git para usar o token do app para todas as URLs HTTPS do github.com
# Isso garante que o pip, ao clonar dependências, usará este token.
git config --global url."https://oauth2:${GH_APP_TOKEN}@github.com/".insteadOf "https://github.com/"
echo "Git authentication configured to use the App Token for github.com"
# (Opcional) Para depuração: Verifique se o token pode listar o repositório remoto
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-dataops-library.git HEAD || echo "Failed to ls-remote sientia-dataops-library"
GIT_TERMINAL_PROMPT=0 git ls-remote https://github.com/Aignosi/sientia-mlops-library.git HEAD || echo "Failed to ls-remote sientia-mlops-library"
- name: 🔧 Setup Python
uses: actions/setup-python@v4
@@ -89,7 +62,6 @@ jobs:
- name: 📦 Install Dependencies
run: |
python -m pip install --upgrade pip
echo "Installing dependencies from ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}"
pip install -r ${{ steps.prepare-requirements.outputs.PROCESSED_REQUIREMENTS_FILE }}
pip install pytest pytest-cov