Fix: Update CI workflow to use Alpine-based images, install Node.js and Trivy with improved methods, and enhance dependency scanning steps #1
@ -32,7 +32,7 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
- name: Install Node.js for checkout action
|
- name: Install Node.js for checkout action
|
||||||
run: |
|
run: |
|
||||||
apt-get update && apt-get install -y curl
|
apt-get update && apt-get install -y curl git
|
||||||
curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
|
curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
|
||||||
apt-get install -y nodejs
|
apt-get install -y nodejs
|
||||||
|
|
||||||
@ -295,7 +295,7 @@ jobs:
|
|||||||
- name: Install Java and SonarScanner
|
- name: Install Java and SonarScanner
|
||||||
run: |
|
run: |
|
||||||
set -e
|
set -e
|
||||||
apt-get update && apt-get install -y wget curl unzip openjdk-17-jre
|
apt-get update && apt-get install -y wget curl unzip openjdk-21-jre
|
||||||
|
|
||||||
# Use a known working version to avoid download issues
|
# Use a known working version to avoid download issues
|
||||||
SONAR_SCANNER_VERSION="5.0.1.3006"
|
SONAR_SCANNER_VERSION="5.0.1.3006"
|
||||||
@ -396,6 +396,8 @@ jobs:
|
|||||||
-Dsonar.sources=. \
|
-Dsonar.sources=. \
|
||||||
-Dsonar.host.url=${SONAR_HOST_URL} \
|
-Dsonar.host.url=${SONAR_HOST_URL} \
|
||||||
-Dsonar.token=${SONAR_TOKEN} \
|
-Dsonar.token=${SONAR_TOKEN} \
|
||||||
|
-Dsonar.scm.provider=git \
|
||||||
|
-Dsonar.python.version=3.10 \
|
||||||
-X; then
|
-X; then
|
||||||
echo ""
|
echo ""
|
||||||
echo "❌ SonarScanner analysis failed!"
|
echo "❌ SonarScanner analysis failed!"
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user