-
Notifications
You must be signed in to change notification settings - Fork 0
bring over offline changes #1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Large diffs are not rendered by default.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -4,4 +4,3 @@ updates: | |
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,35 +1,59 @@ | ||
| # This workflow will build a .NET project | ||
| # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-net | ||
|
|
||
| name: .NET | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
| push: | ||
| branches: [ "main" ] | ||
| pull_request: | ||
| branches: [ "main" ] | ||
|
|
||
| jobs: | ||
| build: | ||
| name: Build and analyze | ||
| runs-on: windows-latest | ||
|
|
||
| steps: | ||
| - name: Set up JDK | ||
| uses: actions/setup-java@v4.4.0 | ||
| with: | ||
| java-version: 17 | ||
| distribution: 'zulu' | ||
|
|
||
| runs-on: ubuntu-latest | ||
| - name: Checkout | ||
| uses: actions/checkout@v4.2.1 | ||
| with: | ||
| fetch-depth: 0 | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| - name: Setup .NET | ||
| uses: actions/setup-dotnet@v4 | ||
| with: | ||
| dotnet-version: 9.0.x | ||
|
|
||
| - name: Delete nuget*.config files | ||
| run: rm -f nuget*.config | ||
|
|
||
| - name: Restore dependencies | ||
| run: dotnet restore | ||
|
|
||
| - name: Build | ||
| run: dotnet build --no-restore | ||
|
|
||
| - name: Test | ||
| run: dotnet test --no-build --verbosity normal | ||
| - name: 🛠 Cache SonarQube Cloud packages | ||
| uses: actions/cache@v4.2.3 | ||
| with: | ||
| path: ~\sonar\cache | ||
| key: ${{ runner.os }}-sonar | ||
| restore-keys: ${{ runner.os }}-sonar | ||
|
|
||
| - name: 🛠 Cache SonarQube Cloud scanner | ||
| id: cache-sonar-scanner | ||
| uses: actions/cache@v4.2.3 | ||
| with: | ||
| path: .\.sonar\scanner | ||
| key: ${{ runner.os }}-sonar-scanner | ||
| restore-keys: ${{ runner.os }}-sonar-scanner | ||
|
|
||
| - name: 🛠 Install SonarQube Cloud scanner | ||
| if: steps.cache-sonar-scanner.outputs.cache-hit != 'true' | ||
| shell: powershell | ||
| run: | | ||
| New-Item -Path .\.sonar\scanner -ItemType Directory | ||
| dotnet tool update dotnet-sonarscanner --tool-path .\.sonar\scanner | ||
| - name: 🔍 Restore, 🛠 Build and 🧪 Test with ☁️ SonarCloud / Qube project - ${{ vars.SONAR_PROJECT_NAME }} | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | ||
| shell: powershell | ||
| run: | | ||
| dotnet tool install --global dotnet-coverage | ||
| .\.sonar\scanner\dotnet-sonarscanner begin /k:"astar-development_${{ github.event.repository.name }}" /o:"astar-development" /d:sonar.token="${{ secrets.SONAR_TOKEN }}" /d:sonar.host.url="https://sonarcloud.io" /d:sonar.cs.vscoveragexml.reportsPaths=coverage.xml /d:sonar.scanner.scanAll=false /d:sonar.scanner.skipJreProvisioning=true | ||
| dotnet build --configuration Release | ||
| dotnet-coverage collect 'dotnet test --filter "FullyQualifiedName!~Tests.EndToEnd"' -f xml -o 'coverage.xml' | ||
| .\.sonar\scanner\dotnet-sonarscanner end /d:sonar.token="${{ secrets.SONAR_TOKEN }}" | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| name: 🚀 Publish NuGet Package | ||
|
|
||
| on: | ||
| workflow_dispatch: | ||
|
|
||
| jobs: | ||
| build: | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: read | ||
|
|
||
| steps: | ||
| - name: 🧾 Checkout code | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: 🛠 Setup .NET | ||
| uses: actions/setup-dotnet@v4 | ||
| with: | ||
| dotnet-version: '9.x' | ||
|
|
||
| - name: 🔍 Restore dependencies | ||
| run: dotnet restore | ||
|
|
||
| - name: 🛠 Build solution | ||
| run: dotnet build --configuration Release | ||
|
|
||
| - name: 📦 Pack NuGet package for ${{ github.event.repository.name }} | ||
| run: dotnet pack ./src/**/*.csproj --configuration Release --output ./nupkg | ||
|
|
||
| - name: 🚀 Publish to NuGet.org | ||
| run: dotnet nuget push ./nupkg/*.nupkg --skip-duplicate --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NuGet_API_Key }} # | ||
|
|
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
This file was deleted.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,19 @@ | ||
| <Solution> | ||
| <Folder Name="/Solution Items/"> | ||
| <File Path=".editorconfig"/> | ||
| <File Path=".gitignore"/> | ||
| <File Path="build-and-test.ps1"/> | ||
| <File Path="CodeMaid.config"/> | ||
| <File Path="LICENSE"/> | ||
| <File Path="nuget.ci.config"/> | ||
| <File Path="nuget.config"/> | ||
| <File Path="README.md"/> | ||
| </Folder> | ||
| <Folder Name="/src/"> | ||
| <Project Path="src\AStar.Dev.Infrastructure.FilesDb\AStar.Dev.Infrastructure.FilesDb.csproj" Type="Classic C#"/> | ||
| </Folder> | ||
| <Folder Name="/test/"/> | ||
| <Folder Name="/test/unit/"> | ||
| <Project Path="test\AStar.Dev.Infrastructure.FilesDb.Tests.Unit\AStar.Dev.Infrastructure.FilesDb.Tests.Unit.csproj" Type="Classic C#"/> | ||
| </Folder> | ||
| </Solution> |
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
This file was deleted.
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 3 months ago
To fix the problem, we should explicitly declare a
permissionsblock at the appropriate scope in the workflow YAML file. Since only the default GITHUB_TOKEN is used and none of the steps require write permissions to repository contents, we can restrict the permissions to read-only forcontents. This can be set at the workflow level (at the root, abovejobs:) to apply to all jobs, or at the job level if different jobs require different permissions.For this workflow in
.github/workflows/dotnet.yml, the single best way to fix the problem is to add the following block after thename:section and beforejobs::No additional imports or definitions are required; just this addition to the YAML structure.