2025-04-12 13:16:20 +00:00

49 lines
1.2 KiB
YAML

apiVersion: tekton.dev/v1
kind: Task
metadata:
name: sonarqube-analysis
spec:
params:
- name: subdirectory
type: string
default: ""
description: Subdirectory within workspace containing the source (if any)
- name: sonarHostUrl
type: string
default: "https://sonarqube.unbox-x.net"
description: SonarQube server URL
- name: projectKey
type: string
description: SonarQube project key
workspaces:
- name: source
description: Workspace with source code (e.g. from git-clone)
- name: sonar-auth
description: |
Workspace containing authentication token (file: `token`)
steps:
- name: sonar-scan
image: sonarsource/sonar-scanner-cli:5
workingDir: /workspace/source
script: |
#!/bin/sh
set -e
if [ -n "$(params.subdirectory)" ]; then
cd "$(params.subdirectory)"
fi
SONAR_TOKEN=$(cat /workspace/sonar-auth/token)
echo "📡 Running SonarQube analysis on project $(params.projectKey)..."
sonar-scanner \
-Dsonar.projectKey=$(params.projectKey) \
-Dsonar.host.url=$(params.sonarHostUrl) \
-Dsonar.login=$SONAR_TOKEN