ci(sonar): implementar análise estática com SonarCloud

.github/workflows/continuous_delivery.yml

@@ -65,6 +65,32 @@ jobs:
       run: npm ci
     - name: API Test
       run: npm test
+    - uses: actions/upload-artifact@v2
+      if: ${{ matrix.node-version == '14.x' && matrix.os == 'ubuntu-20.04' }}
+      with:
+        name: source
+        retention-days: 1
+        path: |
+          ${{ github.workspace }}
+          !.nyc_output/**
+          !.github/**
+          !node_modules/**
+          !docs/**
+
+  sonarcloud:
+    needs: test-api
+
+    runs-on: ubuntu-18.04
+
+    steps:
+    - uses: actions/download-artifact@v2
+      with:
+        name: source
+    - name: SonarCloud Scan
+      uses: SonarSource/sonarcloud-github-action@master
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   test-mutation:
 
@@ -128,7 +154,7 @@ jobs:
         PACT_BROKER_TOKEN: ${{ secrets.PACT_BROKER_TOKEN }}
 
   release:
-    needs: [lint, commit-lint, dockerfile-lint, test-api, test-mutation, test-infra-docker, test-contract]
+    needs: [lint, commit-lint, dockerfile-lint, test-api, test-mutation, test-infra-docker, test-contract, sonarcloud]
 
     runs-on: ubuntu-18.04
 

.github/workflows/continuous_integration.yml

@@ -69,6 +69,32 @@ jobs:
       run: npm ci
     - name: API Test
       run: npm test
+    - uses: actions/upload-artifact@v2
+      if: ${{ matrix.node-version == '14.x' && matrix.os == 'ubuntu-20.04' }}
+      with:
+        name: source
+        retention-days: 1
+        path: |
+          ${{ github.workspace }}
+          !.nyc_output/**
+          !.github/**
+          !node_modules/**
+          !docs/**
+
+  sonarcloud:
+    needs: test-api
+
+    runs-on: ubuntu-18.04
+
+    steps:
+    - uses: actions/download-artifact@v2
+      with:
+        name: source
+    - name: SonarCloud Scan
+      uses: SonarSource/sonarcloud-github-action@master
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   test-mutation-diff:
 

.gitignore

@@ -1,4 +1,5 @@
 .nyc_output/
+coverage/
 node_modules/
 reports/
 

package.json

@@ -35,6 +35,7 @@
     "test:mutation": "cross-env NODE_ENV=serverest-test stryker run ./test/stryker.conf.js",
     "test:mutation:diff": "cross-env NODE_ENV=serverest-test stryker-diff-runner --path ./test/stryker.conf.js --branch trunk",
     "test": "cross-env NODE_ENV=serverest-test nyc mocha --config test/integration/.mocharc.js",
+    "posttest": "nyc report --reporter=lcov",
     "lint": "standard",
     "lint:fix": "standard --fix",
     "lint:staged": "lint-staged",

sonar-project.properties

@@ -0,0 +1,9 @@
+sonar.organization=serverest
+sonar.projectKey=ServeRest
+sonar.projectName=ServeRest
+sonar.projectVersion=1.0
+sonar.sources=src/
+sonar.javascript.lcov.reportPaths=coverage/lcov.info
+sonar.sourceEncoding=UTF-8
+sonar.exclusions=docs/**, test/**, .husky/**, .github/**, coverage/**, .nyc_output/**, reports/**
+sonar.tests=test