ci: collect coverage from platforms and upload to Sonar

.github/actions/ios-sdk-tests/action.yml

@@ -0,0 +1,86 @@
+name: 'Run iOS SDK tests'
+description: 'Test the iOS SDK'
+inputs:
+  ssh-private-key:
+    description: SSH private key
+    required: true
+  known-hosts:
+    description: Known Hosts
+    required: true
+  match-password:
+    description: Match password
+    required: true
+  match-git-private-key:
+    description: Match git private key
+    required: true
+  fastlane-password:
+    description: Fastlane password
+    required: true
+  fastlane-session:
+    description: Fastlane session
+    required: true
+  match-keychain-name:
+    description: Match keychain name
+    required: true
+  match-keychain-password:
+    description: Match keychain password
+    required: true
+  source-branch:
+    description: Source branch
+    required: true
+  coverage-file-name:
+    description: Name of the generic coverage file
+    required: true
+runs:
+  using: "composite"
+  steps:
+    - name: Select Xcode Version
+      uses: maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
+      with:
+        xcode-version: '15.2'
+    - name: Install SSH key
+      uses: shimataro/ssh-key-action@d4fffb50872869abe2d9a9098a6d9c5aa7d16be4 #v2.7.0
+      with:
+        key: ${{ inputs.ssh-private-key }}
+        name: id_rsa_github_actions
+        known_hosts: ${{ inputs.known-hosts }}
+    - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+      with:
+        ssh-private-key: ${{ inputs.ssh-private-key }}
+    - uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677  # v1.172.0
+      with:
+        ruby-version: "3.2"
+        bundler-cache: true
+
+    - name: Install packages
+      shell: bash
+      run: |
+        yarn install
+
+    - name: pod install
+      shell: bash
+      run: |
+        yarn pods
+
+    - name: Create main.jsbundle
+      shell: bash
+      run: |
+        yarn --cwd packages/example build:ios
+
+    - name: Test SDK bridge
+      shell: bash
+      run: |
+        bundle exec fastlane ios tests
+      env:
+        MATCH_PASSWORD: ${{ inputs.match-password }}
+        MATCH_GIT_PRIVATE_KEY: ${{ inputs.ssh-private-key }}
+        FASTLANE_PASSWORD: ${{ inputs.fastlane-password }}
+        FASTLANE_SESSION: ${{ inputs.fastlane-session }}
+        MATCH_KEYCHAIN_NAME: ${{ inputs.match-keychain-name }}
+        MATCH_KEYCHAIN_PASSWORD: ${{ inputs.match-password }}
+        SOURCE_BRANCH: ${{ inputs.source-branch }}
+    - name: Prepare coverage reports
+      shell: bash
+      run: |
+        bash scripts/xccov-to-sonarqube-generic.sh fastlane/test_output/example_0_70_6Tests.xcresult/ > coverage.xml
+        sed "s#$PWD/##g" coverage.xml > ${{ inputs.coverage-file-name }}

.github/actions/sonar/action.yml

@@ -0,0 +1,55 @@
+name: 'Run Sonar tests'
+description: 'Upload code quality scans to Sonar'
+inputs:
+  github-token:
+    description: GitHub token
+    required: true
+  sonar-token:
+    description: Sonar token
+    required: true
+  sonar-host:
+    description: Sonar host URL
+    required: true
+  coverage-file-name:
+    description: Name of the LCOV coverage file
+    required: true
+  coverage-file-name-android:
+    description: Name of the Kover coverage file
+    required: true
+  coverage-file-name-ios:
+    description: Name of the iOS generic coverage file
+    required: true
+  branch:
+    description: Branch
+    required: true
+  pull-request-number:
+    description: PR number
+    required: false
+  base-branch:
+    description: PR target branch
+    required: false
+  pull-request-sha:
+    description: PR commit SHA
+    required: false
+
+runs:
+  using: "composite"
+  steps:
+    - name: Install Sonar
+      shell: bash
+      run: |
+        brew install sonar-scanner
+    - name: Update sonar-project.properties
+      shell: bash
+      run: |
+        echo "sonar.pullrequest.key=${{ inputs.pull-request-number }}" >> sonar-project.properties
+        echo "sonar.pullrequest.branch=${{ inputs.branch }}" >> sonar-project.properties
+        echo "sonar.pullrequest.base=${{ inputs.base-branch }}" >> sonar-project.properties
+        echo "sonar.scm.revision=${{ inputs.pull-request-sha }}" >> sonar-project.properties
+        echo "sonar.javascript.lcov.reportPaths=${{ inputs.coverage-file-name }}" >> sonar-project.properties
+        echo "sonar.coverage.jacoco.xmlReportPaths=${{ inputs.coverage-file-name-android }}" >> sonar-project.properties
+        echo "sonar.coverageReportPaths=${{ inputs.coverage-file-name-ios }}" >> sonar-project.properties
+    - name: Run Sonar
+      shell: bash
+      run: |
+        sonar-scanner -Dsonar.token=${{ inputs.sonar-token }}

.github/workflows/android-build-and-distribute.yml

@@ -17,7 +17,7 @@ jobs:
 
       - uses: ruby/setup-ruby@6bd3d993c602f6b675728ebaecb2b569ff86e99b # v1.174.0
         with:
-          ruby-version: "2.7"
+          ruby-version: "3.2"
           bundler-cache: true
 
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2

.github/workflows/unit-tests-and-code-quality.yml

@@ -0,0 +1,128 @@
+name: Unit Tests and Code Quality
+on: push
+jobs:
+  run-unit-tests:
+    name: Run RN unit tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          cache: 'yarn'
+
+      - name: Install modules
+        run: yarn install --immutable
+
+      - name: Run tests and generate lcov report
+        run: yarn test:unit:coverage:lcov -- --maxWorkers=1
+
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        with:
+          name: coverage-file-rn
+          path: coverage
+
+  run-unit-tests-android:
+    name: Run Android unit tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          cache: 'yarn'
+
+      - name: Install modules
+        run: yarn install --immutable
+
+      - uses: ruby/setup-ruby@6bd3d993c602f6b675728ebaecb2b569ff86e99b # v1.174.0
+        with:
+          ruby-version: "3.2"
+          bundler-cache: true
+
+      - name: Install packages
+        shell: bash
+        run: |
+          yarn install
+
+      - name: Run Android unit tests and generate coverage
+        run: bundle exec fastlane android run_unit_tests_coverage
+
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        with:
+          name: coverage-file-android
+          path: packages/sdk/android/build/reports
+
+  run-unit-tests-ios:
+    name: Run iOS unit tests
+    runs-on: macos-13-large
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          cache: 'yarn'
+
+      - name: Install modules
+        run: yarn install --immutable
+
+      - name: Run SDK tests
+        uses: ./.github/actions/ios-sdk-tests
+        with:
+          ssh-private-key: ${{ secrets.SSH_KEY }}
+          known-hosts: ${{ secrets.KNOWN_HOSTS }}
+          match-password: ${{ secrets.MATCH_PASSWORD }}
+          match-git-private-key: ${{ secrets.FASTLANE_PASSWORD }}
+          fastlane-session: ${{ secrets.FASTLANE_SESSION }}
+          fastlane-password: ${{ secrets.FASTLANE_PASSWORD }}
+          match-keychain-name: ${{ secrets.MATCH_KEYCHAIN_NAME }}
+          match-keychain-password: ${{ secrets.MATCH_KEYCHAIN_PASSWORD }}
+          coverage-file-name: sonar-coverage.xml
+
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        with:
+          name: coverage-file-ios
+          path: sonar-coverage.xml
+
+  sonarcloud:
+    needs:
+      - run-unit-tests
+      - run-unit-tests-android
+      - run-unit-tests-ios
+    name: Run Code checks using Sonar
+    runs-on: macos-13-large
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
+
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        with:
+          name: coverage-file-rn
+          path: coverage
+
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        with:
+          name: coverage-file-android
+
+      - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
+        with:
+          name: coverage-file-ios
+
+      - name: SonarCloud Scan
+        uses: ./.github/actions/sonar
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
+          sonar-token: ${{ secrets.SONAR_TOKEN }}
+          sonar-host: https://sonarcloud.io.
+          pull-request-number: ${{ github.event.pull_request.number }}
+          branch: ${{ github.head_ref }}
+          base-branch: ${{ github.base_ref }}
+          pull-request-sha: ${{ github.event.pull_request.head.sha }}
+          coverage-file-name: ./coverage/lcov.info
+          coverage-file-name-android: ./kover/reportRelease.xml
+          coverage-file-name-ios: sonar-coverage.xml

.gitignore

@@ -64,4 +64,9 @@ android/keystores/debug.keystore
 lib/
 
 # npm
-.npmrc
+.npmrc
+
+# files
+**/coverage/*
+**/coverage.json
+.nyc_output/