Fix: Update CI workflow to use Alpine-based images, install Node.js and Trivy with improved methods, and enhance dependency scanning steps #1
@ -391,12 +391,26 @@ jobs:
|
|||||||
- name: Run SonarScanner
|
- name: Run SonarScanner
|
||||||
run: |
|
run: |
|
||||||
echo "Starting SonarQube analysis..."
|
echo "Starting SonarQube analysis..."
|
||||||
sonar-scanner \
|
if ! sonar-scanner \
|
||||||
-Dsonar.projectKey=ansible-infra \
|
-Dsonar.projectKey=ansible \
|
||||||
-Dsonar.sources=. \
|
-Dsonar.sources=. \
|
||||||
-Dsonar.host.url=${SONAR_HOST_URL} \
|
-Dsonar.host.url=${SONAR_HOST_URL} \
|
||||||
-Dsonar.login=${SONAR_TOKEN} \
|
-Dsonar.login=${SONAR_TOKEN} \
|
||||||
-X
|
-X; then
|
||||||
|
echo ""
|
||||||
|
echo "❌ SonarScanner analysis failed!"
|
||||||
|
echo ""
|
||||||
|
echo "Common issues:"
|
||||||
|
echo " 1. Project 'ansible' doesn't exist in SonarQube"
|
||||||
|
echo " → Create it manually in SonarQube UI"
|
||||||
|
echo " 2. Token doesn't have permission to analyze/create project"
|
||||||
|
echo " → Ensure token has 'Execute Analysis' permission"
|
||||||
|
echo " 3. Token doesn't have 'Create Projects' permission (if project doesn't exist)"
|
||||||
|
echo " → Grant this permission in SonarQube user settings"
|
||||||
|
echo ""
|
||||||
|
echo "Check SonarQube logs for more details."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
continue-on-error: true
|
continue-on-error: true
|
||||||
|
|
||||||
workflow-summary:
|
workflow-summary:
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user