Skip to content

Merge branch 'dev' of https://github.com/MaibornWolff/SecObserve into… #342

Merge branch 'dev' of https://github.com/MaibornWolff/SecObserve into…

Merge branch 'dev' of https://github.com/MaibornWolff/SecObserve into… #342

name: Check for vulnerabilities in the code
on: [push]
permissions: read-all
jobs:
check_code_vulnerabilities:
if: github.repository == 'MaibornWolff/SecObserve'
runs-on: ubuntu-latest
steps:
-
name: Checkout code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
name: Run vulnerability scanners for code
uses: MaibornWolff/secobserve_actions_templates/actions/vulnerability_scanner@32595f58f393dbc99507c7ec574e47c3443808f1 # main
with:
so_configuration: 'so_configuration_code.yml'
SO_API_TOKEN: ${{ secrets.SO_API_TOKEN }}
check_code_sonarqube_backend:
if: github.repository == 'MaibornWolff/SecObserve'
runs-on: ubuntu-latest
steps:
-
name: Checkout code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
-
name: Run SonarQube scan for backend
uses: SonarSource/sonarqube-scan-action@2500896589ef8f7247069a56136f8dc177c27ccf # v5.2.0
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
with:
projectBaseDir: backend
check_code_sonarqube_frontend:
if: github.repository == 'MaibornWolff/SecObserve'
runs-on: ubuntu-latest
steps:
-
name: Checkout code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
-
name: Run SonarQube scan for frontend
uses: SonarSource/sonarqube-scan-action@2500896589ef8f7247069a56136f8dc177c27ccf # v5.2.0
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_FRONTEND }}
with:
projectBaseDir: frontend