Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
47 changes: 0 additions & 47 deletions .github/workflows/ci-quality.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,14 +5,11 @@
# All project-specific values come from repository variables/secrets.
#
# Required GitHub Secrets:
# SONAR_TOKEN — SonarCloud token
# GITGUARDIAN_API_KEY — GitGuardian API key
# CODECOV_TOKEN — Codecov upload token
#
# Required GitHub Variables (Settings → Variables):
# PYTHON_VERSION — Python version (e.g. "3.12")
# SONAR_PROJECT_KEY — SonarCloud project key
# SONAR_ORG — SonarCloud organization
#
# Optional GitHub Variables:
# TEST_DB_IMAGE — Postgres image (default: postgres:16)
Expand Down Expand Up @@ -97,48 +94,6 @@ jobs:
env:
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN || '' }}

# ===========================================================================
# SONARCLOUD — Code Quality & Security Analysis
# ===========================================================================
sonarcloud:
name: SonarCloud Analysis
runs-on: ubuntu-latest
timeout-minutes: 15

steps:
- name: Checkout code
uses: actions/checkout@v6
with:
fetch-depth: 0

- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: ${{ env.PYTHON_VERSION }}
cache: "pip"

- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -e . 2>/dev/null || pip install -r requirements.txt 2>/dev/null || true
pip install pytest pytest-cov

- name: Run tests with coverage
run: pytest tests/ --cov=. --cov-report=xml --cov-report=term --ignore=tests/e2e || true
continue-on-error: true

- name: SonarCloud Scan
uses: SonarSource/sonarcloud-github-action@master
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
with:
args: >
-Dsonar.projectKey=${{ vars.SONAR_PROJECT_KEY }}
-Dsonar.organization=${{ vars.SONAR_ORG }}
-Dsonar.python.coverage.reportPaths=coverage.xml
-Dsonar.qualitygate.wait=true

# ===========================================================================
# SECRETS-SCAN — GitGuardian Secrets Detection
# ===========================================================================
Expand Down Expand Up @@ -291,7 +246,6 @@ jobs:
needs:
- lint-format
- semgrep
- sonarcloud
- secrets-scan
- coverage
- yaml-validate
Expand All @@ -308,7 +262,6 @@ jobs:
echo ""
echo " ├─ Lint & Format: ${{ needs.lint-format.result }}"
echo " ├─ Semgrep: ${{ needs.semgrep.result }}"
echo " ├─ SonarCloud: ${{ needs.sonarcloud.result }}"
echo " ├─ Secrets Scan: ${{ needs.secrets-scan.result }}"
echo " ├─ Coverage: ${{ needs.coverage.result }}"
echo " ├─ YAML Validate: ${{ needs.yaml-validate.result }}"
Expand Down
Loading