Skip to content

Bump vaadin.version from 24.1.4 to 24.1.8 #84

Bump vaadin.version from 24.1.4 to 24.1.8

Bump vaadin.version from 24.1.4 to 24.1.8 #84

Workflow file for this run

name: Sonar
on:
workflow_dispatch:
push:
branches: [ develop ]
paths-ignore:
- '**.md'
- 'assets/**'
- 'config/**'
pull_request:
types: [opened, synchronize, reopened]
paths-ignore:
- '**.md'
- 'assets/**'
- 'config/**'
env:
SONARCLOUD_ORG: ${{ github.event.organization.login }}
SONARCLOUD_HOST: https://sonarcloud.io
jobs:
sonar:
name: SonarCloud Scan
runs-on: ubuntu-latest
# Dependabot PRs have no access to secrets (SONAR_TOKEN) -> Ignore them
if: ${{ github.event_name != 'pull_request' || !startsWith(github.head_ref, 'dependabot/') }}
steps:
- uses: actions/checkout@v3
with:
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: Set up JDK
uses: actions/setup-java@v3
with:
distribution: 'temurin'
java-version: 17
- name: Cache SonarCloud packages
uses: actions/cache@v3
with:
path: ~/.sonar/cache
key: ${{ runner.os }}-sonar
restore-keys: ${{ runner.os }}-sonar
- name: Cache Maven packages
uses: actions/cache@v3
with:
path: ~/.m2
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-m2
- name: Build with Maven
run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=${{ env.SONARCLOUD_ORG }}_${{ github.event.repository.name }} -Dsonar.organization=${{ env.SONARCLOUD_ORG }} -Dsonar.host.url=${{ env.SONARCLOUD_HOST }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}