Fix: Update CI workflow to use Alpine-based images, install Node.js and Trivy with improved methods, and enhance dependency scanning steps #1

Merged
ilia merged 11 commits from update-ci into master 2025-12-17 22:45:01 -05:00
Showing only changes of commit 3828e04b13 - Show all commits

View File

@ -32,7 +32,7 @@ jobs:
steps: steps:
- name: Install Node.js for checkout action - name: Install Node.js for checkout action
run: | run: |
apt-get update && apt-get install -y curl apt-get update && apt-get install -y curl git
curl -fsSL https://deb.nodesource.com/setup_20.x | bash - curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
apt-get install -y nodejs apt-get install -y nodejs
@ -295,7 +295,7 @@ jobs:
- name: Install Java and SonarScanner - name: Install Java and SonarScanner
run: | run: |
set -e set -e
apt-get update && apt-get install -y wget curl unzip openjdk-17-jre apt-get update && apt-get install -y wget curl unzip openjdk-21-jre
# Use a known working version to avoid download issues # Use a known working version to avoid download issues
SONAR_SCANNER_VERSION="5.0.1.3006" SONAR_SCANNER_VERSION="5.0.1.3006"
@ -396,6 +396,8 @@ jobs:
-Dsonar.sources=. \ -Dsonar.sources=. \
-Dsonar.host.url=${SONAR_HOST_URL} \ -Dsonar.host.url=${SONAR_HOST_URL} \
-Dsonar.token=${SONAR_TOKEN} \ -Dsonar.token=${SONAR_TOKEN} \
-Dsonar.scm.provider=git \
-Dsonar.python.version=3.10 \
-X; then -X; then
echo "" echo ""
echo "❌ SonarScanner analysis failed!" echo "❌ SonarScanner analysis failed!"