-
Notifications
You must be signed in to change notification settings - Fork 24
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge remote-tracking branch 'origin/develop' into feature_2842_ugrid…
…_config
- Loading branch information
Showing
163 changed files
with
4,507 additions
and
3,042 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,45 @@ | ||
| #! /bin/bash | ||
|
|
||
| source ${GITHUB_WORKSPACE}/.github/jobs/bash_functions.sh | ||
|
|
||
| DOCKERHUB_TAG=met-sonarqube-gha | ||
|
|
||
| DOCKERFILE_PATH=${GITHUB_WORKSPACE}/internal/scripts/docker/Dockerfile.sonarqube | ||
|
|
||
| CMD_LOGFILE=${GITHUB_WORKSPACE}/sonarqube_build.log | ||
|
|
||
| # | ||
| # Define the $SONAR_REFERENCE_BRANCH as the | ||
| # - Target of any requests | ||
| # - Manual setting for workflow dispatch | ||
| # - Source branch for any pushes (e.g. develop) | ||
| # | ||
| if [ "${GITHUB_EVENT_NAME}" == "pull_request" ]; then | ||
| export SONAR_REFERENCE_BRANCH=${GITHUB_BASE_REF} | ||
| elif [ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" ]; then | ||
| export SONAR_REFERENCE_BRANCH=${WD_REFERENCE_BRANCH} | ||
| else | ||
| export SONAR_REFERENCE_BRANCH=${SOURCE_BRANCH} | ||
| fi | ||
|
|
||
| echo SONAR_REFERENCE_BRANCH=${SONAR_REFERENCE_BRANCH} | ||
|
|
||
| time_command docker build -t ${DOCKERHUB_TAG} \ | ||
| --build-arg MET_BASE_REPO \ | ||
| --build-arg MET_BASE_TAG \ | ||
| --build-arg SOURCE_BRANCH \ | ||
| --build-arg SONAR_SCANNER_VERSION \ | ||
| --build-arg SONAR_HOST_URL \ | ||
| --build-arg SONAR_TOKEN \ | ||
| --build-arg SONAR_REFERENCE_BRANCH \ | ||
| -f $DOCKERFILE_PATH ${GITHUB_WORKSPACE} | ||
| if [ $? != 0 ]; then | ||
| cat ${CMD_LOGFILE} | ||
| exit 1 | ||
| fi | ||
|
|
||
| # Copy the .scannerwork directory from the image | ||
| id=$(docker create ${DOCKERHUB_TAG}) | ||
| time_command mkdir -p /tmp/scannerwork | ||
| time_command docker cp $id:/met/.scannerwork/report-task.txt /tmp/scannerwork/report-task.txt | ||
| docker rm -v $id |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,91 @@ | ||
| name: SonarQube Scan | ||
|
|
||
| # Run SonarQube for Pull Requests and changes to the develop and main_vX.Y branches | ||
|
|
||
| on: | ||
|
|
||
| # Trigger analysis for pushes to develop and main_vX.Y branches | ||
| push: | ||
| branches: | ||
| - develop | ||
| - 'main_v**' | ||
| paths-ignore: | ||
| - 'docs/**' | ||
| - '.github/pull_request_template.md' | ||
| - '.github/ISSUE_TEMPLATE/**' | ||
| - '.github/labels/**' | ||
| - '**/README.md' | ||
| - '**/LICENSE.md' | ||
|
|
||
| # Trigger analysis for pull requests to develop and main_vX.Y branches | ||
| pull_request: | ||
| types: [opened, synchronize, reopened] | ||
| branches: | ||
| - develop | ||
| - 'main_v**' | ||
| paths-ignore: | ||
| - 'docs/**' | ||
| - '.github/pull_request_template.md' | ||
| - '.github/ISSUE_TEMPLATE/**' | ||
| - '.github/labels/**' | ||
| - '**/README.md' | ||
| - '**/LICENSE.md' | ||
|
|
||
| workflow_dispatch: | ||
| inputs: | ||
| reference_branch: | ||
| description: 'Reference Branch' | ||
| default: develop | ||
| type: string | ||
|
|
||
| jobs: | ||
| build: | ||
| name: SonarQube Scan | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
|
|
||
| - uses: actions/checkout@v4 | ||
| with: | ||
| # Disable shallow clones for better analysis | ||
| fetch-depth: 0 | ||
|
|
||
| - name: Create output directories | ||
| run: mkdir -p ${RUNNER_WORKSPACE}/logs | ||
|
|
||
| - name: Get branch name | ||
| id: get_branch_name | ||
| run: echo branch_name=${GITHUB_REF#refs/heads/} >> $GITHUB_OUTPUT | ||
|
|
||
| - name: SonarQube Scan in Docker | ||
| run: .github/jobs/build_sonarqube_image.sh | ||
| env: | ||
| MET_BASE_REPO: met-base | ||
| MET_BASE_TAG: v3.2 | ||
| SOURCE_BRANCH: ${{ steps.get_branch_name.outputs.branch_name }} | ||
| WD_REFERENCE_BRANCH: ${{ github.event.inputs.reference_branch }} | ||
| SONAR_SCANNER_VERSION: 5.0.1.3006 | ||
| SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} | ||
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
|
|
||
| - name: SonarQube Quality Gate check | ||
| id: sonarqube-quality-gate-check | ||
| uses: sonarsource/sonarqube-quality-gate-action@master | ||
| with: | ||
| scanMetadataReportFile: /tmp/scannerwork/report-task.txt | ||
| timeout-minutes: 5 | ||
| env: | ||
| SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} | ||
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
|
|
||
| - name: Copy log files into logs directory | ||
| if: always() | ||
| run: cp ${GITHUB_WORKSPACE}/*.log ${RUNNER_WORKSPACE}/logs/ | ||
|
|
||
| - name: Upload logs as artifact | ||
| if: always() | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: logs_sonarqube | ||
| path: ${{ runner.workspace }}/logs | ||
| if-no-files-found: ignore |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,94 @@ | ||
| ARG MET_BASE_REPO=met-base | ||
| ARG MET_BASE_TAG=v3.2 | ||
|
|
||
| FROM dtcenter/${MET_BASE_REPO}:${MET_BASE_TAG} | ||
| MAINTAINER John Halley Gotway <[email protected]> | ||
|
|
||
| # | ||
| # This Dockerfile checks out MET from GitHub and runs the | ||
| # SonarQube static code analysis on the specified branch or tag. | ||
| # https://docs.sonarqube.org/latest/analysis/scan/sonarscanner/ | ||
| # | ||
| ARG SONAR_SCANNER_VERSION=5.0.1.3006 | ||
| ARG SONAR_HOST_URL | ||
| ARG SONAR_TOKEN | ||
| ARG SOURCE_BRANCH | ||
| ARG SONAR_REFERENCE_BRANCH | ||
|
|
||
| # | ||
| # SONAR_HOST_URL is required. | ||
| # | ||
| RUN if [ "x${SONAR_HOST_URL}" = "x" ]; then \ | ||
| echo "ERROR: SONAR_HOST_URL undefined! Rebuild with \"--build-arg SONAR_HOST_URL={url}\""; \ | ||
| exit 1; \ | ||
| fi | ||
|
|
||
| # | ||
| # SONAR_TOKEN is required. | ||
| # | ||
| RUN if [ "x${SONAR_TOKEN}" = "x" ]; then \ | ||
| echo "ERROR: SONAR_TOKEN undefined! Rebuild with \"--build-arg SONAR_TOKEN={token}\""; \ | ||
| exit 1; \ | ||
| fi | ||
|
|
||
| # | ||
| # SOURCE_BRANCH is the branch name of the MET source code. | ||
| # | ||
| RUN if [ "x${SOURCE_BRANCH}" = "x" ]; then \ | ||
| echo "ERROR: SOURCE_BRANCH undefined! Rebuild with \"--build-arg SOURCE_BRANCH={branch name}\""; \ | ||
| exit 1; \ | ||
| else \ | ||
| echo "Build Argument SOURCE_BRANCH=${SOURCE_BRANCH}"; \ | ||
| fi | ||
|
|
||
| # | ||
| # SONAR_REFERENCE_BRANCH defines to the version against which this scan should be compared. | ||
| # | ||
| RUN if [ "x${SONAR_REFERENCE_BRANCH}" = "x" ]; then \ | ||
| echo "ERROR: SONAR_REFERENCE_BRANCH undefined! Rebuild with \"--build-arg SONAR_REFERENCE_BRANCH={branch name}\""; \ | ||
| exit 1; \ | ||
| else \ | ||
| echo "Build Argument SONAR_REFERENCE_BRANCH=${SONAR_REFERENCE_BRANCH}"; \ | ||
| fi | ||
|
|
||
| ENV MET_GIT_NAME ${SOURCE_BRANCH} | ||
| ENV MET_REPO_DIR /met/MET-${MET_GIT_NAME} | ||
| ENV MET_GIT_URL https://github.com/dtcenter/MET | ||
|
|
||
| # | ||
| # Download and install the Sonar software. | ||
| # | ||
| RUN echo "Installing SonarQube into $HOME/.sonar" \ | ||
| && mkdir -p $HOME/.sonar \ | ||
| && curl -sSLo $HOME/.sonar/sonar-scanner.zip https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-${SONAR_SCANNER_VERSION}-linux.zip \ | ||
| && unzip -o $HOME/.sonar/sonar-scanner.zip -d $HOME/.sonar/ \ | ||
| && echo export PATH="$HOME/.sonar/sonar-scanner-${SONAR_SCANNER_VERSION}-linux/bin:\$PATH" >> $HOME/.bashrc \ | ||
| && curl -sSLo $HOME/.sonar/build-wrapper-linux-x86.zip ${SONAR_HOST_URL}/static/cpp/build-wrapper-linux-x86.zip \ | ||
| && unzip -o $HOME/.sonar/build-wrapper-linux-x86.zip -d $HOME/.sonar/ \ | ||
| && echo export PATH="$HOME/.sonar/build-wrapper-linux-x86:\$PATH" >> $HOME/.bashrc | ||
|
|
||
| # | ||
| # Update the OS, as needed. | ||
| # | ||
| RUN apt update | ||
|
|
||
| # | ||
| # Set the working directory. | ||
| # | ||
| WORKDIR /met | ||
|
|
||
| # | ||
| # Copy MET Download and install MET. | ||
| # | ||
| RUN echo "Copying MET into ${MET_REPO_DIR}" \ | ||
| && mkdir -p ${MET_REPO_DIR} | ||
|
|
||
| COPY . ${MET_REPO_DIR} | ||
|
|
||
| RUN if [ ! -e "${MET_REPO_DIR}/configure.ac" ]; then \ | ||
| echo "ERROR: docker build must be run from the MET directory: `ls`"; \ | ||
| exit 1; \ | ||
| fi | ||
|
|
||
| RUN cd ${MET_REPO_DIR} \ | ||
| && internal/scripts/docker/build_met_sonarqube.sh |
Oops, something went wrong.