git_actions/sonarqube-quality-gate-action
1
0 Fork 0
mirror of https://github.com/SonarSource/sonarqube-quality-gate-action.git synced 2026-10-03 10:21:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

Include SONAR_ROOT_CERT option custom TRA certificates (#39)

Browse Source
This commit is contained in:
Nathan Reynolds authored and GitHub committed 2023-04-18 10:47:25 +02:00
1 parent cfad4b4364
commit b438cfa1bd
2 files changed
+9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+2
View File
@@ -84,6 +84,8 @@ Example usage:
- `SONAR_HOST_URL` – **Optional** this tells the scanner where SonarQube is hosted, otherwise it will get the one from the scan report. You can set the `SONAR_HOST_URL` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended). - `SONAR_HOST_URL` – **Optional** this tells the scanner where SonarQube is hosted, otherwise it will get the one from the scan report. You can set the `SONAR_HOST_URL` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended).
- `SONAR_ROOT_CERT` – Holds an additional root certificate (in PEM format) that is used to validate the SonarQube server certificate. You can set the `SONAR_ROOT_CERT` environment variable in the "Secrets" settings page of your repository, or you can add them at the level of your GitHub organization (recommended).
## Quality Gate check run ## Quality Gate check run
<img src="./images/QualityGate-check-screen.png"> <img src="./images/QualityGate-check-screen.png">
script/check-quality-gate.sh
+7
View File
@@ -27,6 +27,13 @@ if [ -z "${serverUrl}" ] || [ -z "${ceTaskUrl}" ]; then
exit 1 exit 1
fi fi
if [[ -n "${SONAR_ROOT_CERT}" ]]; then
echo "Adding custom root certificate to ~/.curlrc"
rm -f /tmp/tmpcert.pem
echo "${SONAR_ROOT_CERT}" > /tmp/tmpcert.pem
echo "--cacert /tmp/tmpcert.pem" >> ~/.curlrc
fi
task="$(curl --location --location-trusted --max-redirs 10 --silent --fail --show-error --user "${SONAR_TOKEN}": "${ceTaskUrl}")" task="$(curl --location --location-trusted --max-redirs 10 --silent --fail --show-error --user "${SONAR_TOKEN}": "${ceTaskUrl}")"
status="$(jq -r '.task.status' <<< "$task")" status="$(jq -r '.task.status' <<< "$task")"