ADORSYS-GIS / ADORSYS-GIS/wazuh-plugins
feat: Integrate Enterprise SonarQube for Code Quality Scanning
- Linguagem predominante
- Python
- Estrelas
- 0
- Forks
- 0
- Merge médio
- 1d 20h
- PRs com merge (30d)
- 3
Descrição
### Background
We need to configure Enterprise SonarQube scanning for this repository to ensure code quality and security checks are part of our CI/CD pipeline. Currently, we need to migrate/setup the Enterprise edition rather than the free tier.
### Objective
Integrate the SonarQube Github Actions workflow.
### Tasks
- [ ] Add `.github/workflows/sonarqube.yml` to trigger on `pull_request` and `push` to `develop`/`main`.
- [ ] Configure `SONAR_HOST_URL` and `SONAR_TOKEN` secrets in the repository settings.
- [ ] Set `sonar.projectKey` to match this repository name.
- [ ] Configure `sonar.exclusions` to exclude build, dependency, and coverage directories.
Guia de contribuição
Nenhum guia de contribuição indexado para este repositório
Direção de pesquisa
Start with the requested .github/workflows/sonarqube.yml and the repository's GitHub Actions configuration. Verify the workflow triggers on pull requests and pushes to develop/main, uses the named repository secrets, matches the repository project key, and excludes build, dependency, and coverage directories.
Escrita pelo modelo de indexação a partir do texto da issue.
Avaliação
- Stack de tecnologia
- github-actions, python
- Domínio
- ci-cd, devops
- Tipo de issue
- Funcionalidade
- Dificuldade
- 3/5
- Tempo estimado
- 1-2 dias
- Status de atividade
- Ativa
- Clareza
- Razoavelmente clara
- Facilidade para iniciantes
- 45/100