diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index a09f24c5..0a4c5870 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -76,16 +76,6 @@ OSTree Images: - aws/rhel-9.4-nightly-x86_64 INTERNAL_NETWORK: "true" -SonarQube: - stage: test - extends: .terraform - script: - - schutzbot/sonarqube.sh - variables: - RUNNER: aws/centos-stream-8-x86_64 - INTERNAL_NETWORK: "true" - GIT_DEPTH: 0 - Manifests: stage: test extends: .terraform diff --git a/schutzbot/sonarqube.sh b/schutzbot/sonarqube.sh deleted file mode 100755 index e3f01e1e..00000000 --- a/schutzbot/sonarqube.sh +++ /dev/null @@ -1,30 +0,0 @@ -#!/bin/bash - -set -euxo pipefail - -SONAR_SCANNER_CLI_VERSION=${SONAR_SCANNER_CLI_VERSION:-4.6.2.2472} - -export SONAR_SCANNER_OPTS="-Djavax.net.ssl.trustStore=schutzbot/RH-IT-Root-CA.keystore -Djavax.net.ssl.trustStorePassword=$KEYSTORE_PASS" -sudo dnf install -y unzip -curl "https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-$SONAR_SCANNER_CLI_VERSION-linux.zip" -o sonar-scanner-cli.zip -unzip -q sonar-scanner-cli.zip - -SONAR_SCANNER_CMD="sonar-scanner-$SONAR_SCANNER_CLI_VERSION-linux/bin/sonar-scanner" -SCANNER_OPTS="-Dsonar.projectKey=osbuild:osbuild -Dsonar.sources=. -Dsonar.host.url=https://sonarqube.corp.redhat.com -Dsonar.login=$SONAR_SCANNER_TOKEN" - -# add options for branch analysis if not running on main -if [ "$CI_COMMIT_BRANCH" != "main" ];then - SCANNER_OPTS="$SCANNER_OPTS -Dsonar.pullrequest.branch=$CI_COMMIT_BRANCH -Dsonar.pullrequest.key=$CI_COMMIT_SHA -Dsonar.pullrequest.base=main" -fi - -# run the sonar-scanner -eval "$SONAR_SCANNER_CMD $SCANNER_OPTS" - -SONARQUBE_URL="https://sonarqube.corp.redhat.com/dashboard?id=osbuild%3Aosbuild&pullRequest=$CI_COMMIT_SHA" -# Report back to GitHub -curl \ - -u "${SCHUTZBOT_LOGIN}" \ - -X POST \ - -H "Accept: application/vnd.github.v3+json" \ - "https://api.github.com/repos/osbuild/osbuild/statuses/${CI_COMMIT_SHA}" \ - -d '{"state":"success", "description": "SonarQube scan sent for analysis", "context": "SonarQube", "target_url": "'"${SONARQUBE_URL}"'"}'