Skip to content

yarn audit which is transformed to sonarcloud external issue report

Notifications You must be signed in to change notification settings

OralEye/yarn-audit-sonar

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Github Action to deploy onto Aptible Deploy

This action runs yarn audit and transforms the output json into a structure for SonarCloud. The output file will be named yarnaudit-sonar.json in the current directory. Set the externalIssuesReportPaths value in sonar-project.properties It should run before SonarCloud is ran.

sonar.externalIssuesReportPaths=./yarnaudit-sonar.json

Required input and output arguments

Optional input and output arguments

Secrets the action uses

Environment variables the action uses

Example github actions usage

name: Running a command via SSH on an aptible environment


jobs:
  rake:
    runs-on: ubuntu-latest

    steps:
      - name: Run yarn audit
        uses: OralEye/yarn-audit-sonar@master

      - name: SonarCloud Scan
        uses: sonarsource/sonarcloud-github-action@master
        env:
          GITHUB_TOKEN: ${{ secrets.GIT_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

About

yarn audit which is transformed to sonarcloud external issue report

Resources

Stars

Watchers

Forks

Packages